Vanilla Forum Security Bypass And Information Disclosure Vulnerabilities
BID:50036
Info
Vanilla Forum Security Bypass And Information Disclosure Vulnerabilities
| Bugtraq ID: | 50036 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 10 2011 12:00AM |
| Updated: | Oct 10 2011 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Vanilla Forums Vanilla 2.0.17.9 |
| Not Vulnerable: |
Vanilla Forums Vanilla 2.0.17.10 |
Discussion
Vanilla Forum Security Bypass And Information Disclosure Vulnerabilities
Vanilla Forum is prone to a security-bypass vulnerability and an information-disclosure vulnerability.
Successful attacks can allow an attacker to obtain sensitive information and bypass certain security restrictions.
Vanilla Forum is prone to a security-bypass vulnerability and an information-disclosure vulnerability.
Successful attacks can allow an attacker to obtain sensitive information and bypass certain security restrictions.
Exploit / POC
Vanilla Forum Security Bypass And Information Disclosure Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Vanilla Forum Security Bypass And Information Disclosure Vulnerabilities
Solution:
Vendor patch is available. Please see the reference for more details.
Solution:
Vendor patch is available. Please see the reference for more details.
References
Vanilla Forum Security Bypass And Information Disclosure Vulnerabilities
References:
References:
- Vanilla changelog (Vanilla Forums)
- Vanilla Forums Homepage (Vanilla Forums)