Vulnerability was fixed in https://www.e-gold.com/acct/confirm.asp
money transfer script.
If authenticated user is referred to the script AccounID/PassPhrase validation is not performed.
By redirecting user to URL
it's possible to transfer money to another account without validation.
On march, 13th 2006 reported to e-gold
On march, 14th 2006 fixed
Details posted on http://bhunter.awardspace.com/vuln-en.html
I did get a small "buggs bounty" from e-gold for this info.