PunBB Unauthorized Moderator Restricted Forums Access Vulnerability
BID:11831
Info
PunBB Unauthorized Moderator Restricted Forums Access Vulnerability
| Bugtraq ID: | 11831 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2003 12:00AM |
| Updated: | Feb 11 2003 12:00AM |
| Credit: | Discovery is credited to _3fps. |
| Vulnerable: |
PunBB PunBB 1.0 _beta3 |
| Not Vulnerable: |
PunBB PunBB 1.0 RC1 |
Discussion
PunBB Unauthorized Moderator Restricted Forums Access Vulnerability
PunBB may permit users with 'moderator status' to gain unauthorized moderator-level access to forums that they do not moderate.
PunBB may permit users with 'moderator status' to gain unauthorized moderator-level access to forums that they do not moderate.
Exploit / POC
PunBB Unauthorized Moderator Restricted Forums Access Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
PunBB Unauthorized Moderator Restricted Forums Access Vulnerability
Solution:
This issue has been addressed in PunBB 1.0RC1 and later.
PunBB PunBB 1.0 _beta3
Solution:
This issue has been addressed in PunBB 1.0RC1 and later.
PunBB PunBB 1.0 _beta3
-
PunBB PunBB 1.1.5
http://www.punbb.org/downloads.php
References
PunBB Unauthorized Moderator Restricted Forums Access Vulnerability
References:
References:
- Changelog 1.0_beta3 to 1.0_rc1 (PunBB)
- PunBB Homepage (PunBB)