CVE-2005-2600

FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter.

Date published : 2005-08-17

http://www.securityfocus.com/bid/14556

http://www.debian.org/security/2005/dsa-798