Ultimate PHP Board Unauthorized Administrative Access Vulnerability
BID:5666
Info
Ultimate PHP Board Unauthorized Administrative Access Vulnerability
| Bugtraq ID: | 5666 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 06 2002 12:00AM |
| Updated: | Sep 06 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Hipik__ <[email protected]>. |
| Vulnerable: |
Ultimate PHP Board Ultimate PHP Board 1.0 b Ultimate PHP Board Ultimate PHP Board 1.0 |
| Not Vulnerable: |
Ultimate PHP Board Ultimate PHP Board 1.0 final beta |
Discussion
Ultimate PHP Board Unauthorized Administrative Access Vulnerability
Ultimate PHP Board does not sufficiently validate whether authenticated users possess administrative privileges before granting access to some administrative facilities.
Authenticated users may exploit this issue to perform administrative actions.
Ultimate PHP Board does not sufficiently validate whether authenticated users possess administrative privileges before granting access to some administrative facilities.
Authenticated users may exploit this issue to perform administrative actions.
Exploit / POC
Ultimate PHP Board Unauthorized Administrative Access Vulnerability
There is no exploit required. The attacker must be an authenticated user of the web forum to access the following administrative scripts:
admin_members.php, admin_config.php, admin_cat.php, admin_forum.php
There is no exploit required. The attacker must be an authenticated user of the web forum to access the following administrative scripts:
admin_members.php, admin_config.php, admin_cat.php, admin_forum.php