PunBB Unauthorized Restricted Forum Access Vulnerability
BID:11829
Info
PunBB Unauthorized Restricted Forum Access Vulnerability
| Bugtraq ID: | 11829 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 20 2002 12:00AM |
| Updated: | Dec 20 2002 12:00AM |
| Credit: | This issue was announced by the vendor. |
| Vulnerable: |
PunBB PunBB 1.0 _beta2 |
| Not Vulnerable: |
PunBB PunBB 1.0 _beta3 |
Discussion
PunBB Unauthorized Restricted Forum Access Vulnerability
PunBB is prone to a vulnerability that will let unauthorized users view restricted forums. This has the potential to disclose sensitive information not intended to be accessed by unauthorized forum users.
PunBB is prone to a vulnerability that will let unauthorized users view restricted forums. This has the potential to disclose sensitive information not intended to be accessed by unauthorized forum users.
Exploit / POC
PunBB Unauthorized Restricted Forum Access Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
PunBB Unauthorized Restricted Forum Access Vulnerability
Solution:
This issue has been addressed in PunBB 1.0_beta3 and later.
PunBB PunBB 1.0 _beta2
Solution:
This issue has been addressed in PunBB 1.0_beta3 and later.
PunBB PunBB 1.0 _beta2
-
PunBB PunBB 1.1.5
http://www.punbb.org/downloads.php
References
PunBB Unauthorized Restricted Forum Access Vulnerability
References:
References:
- Changle 1.0_beta2 to 1.0_beta3 (PunBB)
- PunBB Homepage (PunBB)