Pligg Reset Forgotten Password Security Bypass Vulnerability

Bugtraq ID:	24158
Class:	Design Error
CVE:	CVE-2007-5579
Remote:	Yes
Local:	No
Published:	May 25 2007 12:00AM
Updated:	Nov 15 2007 12:36AM
Credit:	242th section is credited with discovering this issue.
Vulnerable:	Pligg Pligg 9.5
Not Vulnerable:

Pligg Reset Forgotten Password Security Bypass Vulnerability

Pligg is prone to a security-bypass vulnerability due to a design error when resetting forgotten passwords.

An attacker may exploit this issue to reset account passwords for arbitrary users and then compromise a vulnerable application. This can also aid the attacker in further attacks.

Pligg 9.5 is reported vulnerable; other versions may also be affected.

Pligg Reset Forgotten Password Security Bypass Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

http://www.example.com/login.php?processlogin=4&username=admin&confirmationcode=1234567891e2f566cbda0a9c855240bf21b8bae030404cad7

Pligg Reset Forgotten Password Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Pligg Reset Forgotten Password Security Bypass Vulnerability

References:

• Pligg CMS Homepage (Pligg)
  
• Pligg critical vulnerability (242th section)