TinyPHPForum Error.PHP Information Disclosure Vulnerability
BID:19278
Info
TinyPHPForum Error.PHP Information Disclosure Vulnerability
| Bugtraq ID: | 19278 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 01 2006 12:00AM |
| Updated: | Aug 02 2006 04:51PM |
| Credit: | Reported by SirDarckCat. |
| Vulnerable: |
TinyPHPForum TinyPHPForum 3.6 |
| Not Vulnerable: | |
Discussion
TinyPHPForum Error.PHP Information Disclosure Vulnerability
TinyPHPForum is prone to an information-disclosure vulnerability. This issue arises when a script allows a remote untrusted source to change a victim user's email address, and have their login credentials returned to an attacker.
Information that the attacker gathers by exploiting this vulnerability may aid in other attacks.
TinyPHPForum is prone to an information-disclosure vulnerability. This issue arises when a script allows a remote untrusted source to change a victim user's email address, and have their login credentials returned to an attacker.
Information that the attacker gathers by exploiting this vulnerability may aid in other attacks.
Exploit / POC
TinyPHPForum Error.PHP Information Disclosure Vulnerability
An exploit is not required.
A sample URI is available:
An exploit is not required.
A sample URI is available:
Solution / Fix
TinyPHPForum Error.PHP Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
TinyPHPForum Error.PHP Information Disclosure Vulnerability
References:
References:
- TinyPHPForum Homepage (TinyPHPForum)