Full title: Ebuddy Web Messenger Disclosure / CSRF Vulnerabilities Category: web applications Platform: php Ebuddy Web Messenger suffers from index disclosure, cross site request forgery, htaccess file disclosure, and insecure credential transport vulnerabilities. # 0day.today @ http://0day.today/