PHPOutsourcing Zorum Multiple Remote Vulnerabilities
BID:12777
Info
PHPOutsourcing Zorum Multiple Remote Vulnerabilities
| Bugtraq ID: | 12777 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 10 2005 12:00AM |
| Updated: | Mar 10 2005 12:00AM |
| Credit: | Benjilenoob is credited with the discovery of these issues. |
| Vulnerable: |
PHPOutsourcing Zorum 3.5 |
| Not Vulnerable: | |
Discussion
PHPOutsourcing Zorum Multiple Remote Vulnerabilities
Zorum is a freely available, open source Web-based forum application implemented in PHP. It is available for UNIX, Linux, and any other platform that supports PHP script execution.
Multiple remote vulnerabilities affect Zorum. These issues are due to a failure of the application to validate access rights and user-supplied input.
The issues reported are an HTML injection vulnerability, multiple cross-site scripting vulnerabilities, an SQL injection vulnerability, and an authentication bypass issue.
An attacker may leverage these issues to execute script code in an unsuspecting user's browser, to manipulate SQL queries and to bypass authentication requirements.
Zorum is a freely available, open source Web-based forum application implemented in PHP. It is available for UNIX, Linux, and any other platform that supports PHP script execution.
Multiple remote vulnerabilities affect Zorum. These issues are due to a failure of the application to validate access rights and user-supplied input.
The issues reported are an HTML injection vulnerability, multiple cross-site scripting vulnerabilities, an SQL injection vulnerability, and an authentication bypass issue.
An attacker may leverage these issues to execute script code in an unsuspecting user's browser, to manipulate SQL queries and to bypass authentication requirements.
Exploit / POC
PHPOutsourcing Zorum Multiple Remote Vulnerabilities
No exploit is required to leverage any of these issues. The following proof of concepts have been made available:
To carry out cross-site scripting attacks:
http://www.example.com/zorum_3_5/index.php?list="/><script>alert()</script>
http://www.example.com/zorum_3_5/index.php?method=markread&list=zorumuser&fromlist=secmenu&frommethod="/><script>alert()</script>
No exploit is required to leverage any of these issues. The following proof of concepts have been made available:
To carry out cross-site scripting attacks:
http://www.example.com/zorum_3_5/index.php?list="/><script>alert()</script>
http://www.example.com/zorum_3_5/index.php?method=markread&list=zorumuser&fromlist=secmenu&frommethod="/><script>alert()</script>
Solution / Fix
PHPOutsourcing Zorum Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.