Exploit Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
23319
Проверка EDB
  1. Пройдено
Автор
VIRGINITY SECURITY
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2003-1162
Дата публикации
2003-10-31
Код:
source: https://www.securityfocus.com/bid/8944/info

It has been reported that Tritanium Bulletin Board may be prone to an access validation error that may allow a remote attacker to to gain unauthorized access to threads. A remote attacker may be able to access sensitive data by modifying the URL and supplying a value for thread_id, forum_id, and sid paremeters.

Successful exploitation of this issue may allow an attacker to gain access to sensitive information that could be used to launch further attacks against a system.

Tritanium Bulletin Board version 1.2.3 has been reported to be prone to this issue, however other versions may be affected as well.

http://www.example.com/[path]/index.php?faction=reply&thread_id=[ID OF THE THREAD TO READ]&forum_id=[ID OF FORUM]&sid=[your sid]
 
Источник
www.exploit-db.com

Похожие темы