Personal Sticky Threads vBulletin Addon Unauthorized Access Vulnerability

Bugtraq ID:	33017
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 25 2008 12:00AM
Updated:	Dec 31 2008 05:42PM
Credit:	[email protected]
Vulnerable:	Personal Sticky Threads Personal Sticky Threads 1.0.3c
Not Vulnerable:

Personal Sticky Threads vBulletin Addon Unauthorized Access Vulnerability

Personal Sticky Threads is prone to an unauthorized-access vulnerability.

An attacker can exploit this vulnerability to gain unauthorized access to restricted threads. This may disclose potentially sensitive information that may aid in further attacks.

Personal Sticky Threads 1.0.3c is vulnerable; other versions may also be affected.

Personal Sticky Threads vBulletin Addon Unauthorized Access Vulnerability

Attackers may exploit this issue through a browser.

Personal Sticky Threads vBulletin Addon Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Personal Sticky Threads vBulletin Addon Unauthorized Access Vulnerability

References:

• Personal Sticky Threads Product Page (Personal Sticky Threads)
  
• Personal Sticky Threads v1.0.3c vbulletin Add-on problem ([email protected])