Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-3818
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000064