Prozilla Reviews Security Bypass Vulnerability

Bugtraq ID:	28642
Class:	Access Validation Error
CVE:	CVE-2008-1783
Remote:	Yes
Local:	No
Published:	Apr 06 2008 12:00AM
Updated:	May 07 2015 05:30PM
Credit:	t0pP8uZz
Vulnerable:	ProZIlla Reviews 1.0
Not Vulnerable:

Prozilla Reviews Security Bypass Vulnerability

Prozilla Reviews is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions.

Successful exploits will allow attackers to bypass certain security restrictions and delete arbitrary user accounts. This may cause denial-of-service conditions for users whose accounts have been deleted.

This issue affects Prozilla Reviews 1.0; other versions may also be vulnerable.

Prozilla Reviews Security Bypass Vulnerability

An attacker can exploit this issue through a browser.

The following proof-of-concept script is available:

• /data/vulnerabilities/exploits/28642.pl

Prozilla Reviews Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Prozilla Reviews Security Bypass Vulnerability

References:

• Prozilla Homepage (Prozilla)
  
• Prozilla Reviews Homepage (Prozilla)