bi0 has reported a vulnerability in Link Up Gold, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. add administrative accounts by tricking a logged in administrator into visiting a malicious web site.

The vulnerability is reported in version 5.0. Other versions may also be affected.

Solution
Do not browse untrusted sites or follow untrusted links while being logged-in to the application.

Provided and/or discovered by
bi0

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.exploit-db.com/exploits/10436

Deep Links
Links available to Secunia VIM customers