Neuigkeiten:

still alive...

Hauptmenü

Cookie Vulnerability in PFORUM

Begonnen von Powie, 23. August 2004, 08:09:39

Vorheriges Thema - Nächstes Thema

Powie

- ----- Begin: Cookie Vulnerability in Powie\'s PSCRIPT Forum
ii)   name = puserpwd, value=
For example:
i)   name = puserid, value=1
ii)   name = puserpwd, value=43e9a4ab75570f5b
(User ID 1, Password = \'admin\', default setting)
Security Risk
+-----------+
Critical. In addition with the XSS Bug i published one week ago, it\'s very
easy to steal cookies and using this in combination to get administrator or
moderator rights.
Vendor
+----+
 
- ------- End: Cookie Vulnerability in Powie\'s PSCRIPT Forum <= 1.26 -----------

all your base are belong to us