RE: To be honest... |
||
 Ker JeiAr 
I don't think they understand exactly what I mean. For example. "The issues noted concerning the admin scripts are effectively of no concern. To be able to take advantage of said vulnerabilities you must be an admin. If you're an admin why would you want to bother jumping through hoops to discover another users password? You could simply go in, set it to whatever you like and tada, off you go" See, why the hell would you as an admin change a users pass just to log in as said user? The reason you would want the has is because people are notorious for using the same passwords in more than one place. And you are right about my findings being very script kiddie in nature. I mean, all someone wanting to exploit the issue has to do is craft a url and stick it in an [ img ] tag. I dunno what phpBB's deal with this issue is, but to be honest it is making me think twice about whether or not I will contact them again in the future regarding vulns. They always make it a point to say how much people need to contact them regarding vulns before going public, but when they act like you are just over reacting to what I know are very serious it makes you have doubts. They say in regards to the session id/command exec vuln the following "Since then we've had absolutely no reports of problems. We retained session checking in areas like modcp to prevent "spoofing" of moderator functions from 3rd party sites or local links." Yet the only limits to get an admin (pfft @ a mod) to execute commands unknowingly is to pick a command which gets it's values via the GET method. I just don't know man, if ready response were still around I would propose a mission to make phpBB see the seriousness of these issues. if you go to gulftech.org/forums you will see I pulled my phpBB forum offline after my findings. I would not have did this if I did not consider the issue serious. :-\ GulfTech Security Research SubScan 1.2 Replies:
|
||
| CyberArmy::Forum v0.6 Generated In 0.01049 seconds |
2004-03-25 16:48:09
2004-03-24 03:17:41
2004-03-23 11:00:34
2004-03-23 11:16:40
2004-03-23 09:25:26