FUDforum version 3.0.6 suffers from cross site request forgery and cross site scripting vulnerabilities.