CVE-2006-0139: PD9 Software Megabbs

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter.

Affected products

• PD9 Software Megabbs: version 2.0 only; version 2.1 only

Published 2006-01-09. Last modified 2026-06-16.