#################################################### Founded: 18, January 2008 Founder: nbbn MyBB Version: 1.2.11 and lower Type: Multiple XSRF Vulnerabilities #################################################### ####1) Delete Threads XSRF Vulnerabilitie: ###Poc: 1. Create a .html file and copy the code into it. 2. Upload the file and now send the link to an admin or moderator 3. Done ####2) Delete PM's XSRF Vuln: This one is only doing via GET and no question: http://localhost/xampp/mybb/private.php?action=delete&pmid=3 ###Poc: (An easy way): 1. Send to a user this link: http://localhost/xampp/mybb/private.php?action=delete&pmid=3 2. Done