RE: Want Some Opinions |
||
 Ker JeiAr 
You are in my opinion absolutely right. but there is a bigger more serious issue. 1) There is a SQL Injection vuln in an admin module. Attacker #1 wants to take over the site but does not have admin access to exploit this vuln. 2) attacker #1 crafts a uri to exolit the issue and grant himself admin acess. 3) since attacker #1 does not have admin access he relies on phpBB's lack of session ID's to make a post that looks something like this ----------------------- ----------------------- 4) Now the attacker has done two things. Successfully executed a command or query just like he was an admin, and had the admin/mod delete his initial post just by viewing it thus eliminating the evidence. I think if you see how flawed phpBB's logic of this situation is then email them and/or post on thier forum telling them you wanta SECURE php installation :) GulfTech Security Research SubScan 1.2 Replies:
|
||
| CyberArmy::Forum v0.6 Generated In 0.01052 seconds |
2004-03-25 16:48:09
2004-03-24 03:17:41
2004-03-23 11:00:34
2004-03-23 11:16:40
2004-03-23 09:25:26