[VulnWatch] `admin' bug in upb

From: GooDWiN (badwinat_private)
Date: Sun Aug 25 2002 - 07:20:13 PDT

Next message: Matthew Murphy: "[Full-Disclosure] More OmniHTTPd Problems"

Previous message: Auriemma Luigi: "Blazix 1.2 jsp view and free protected folder access"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

product: Ultimate PHP Board (UPB) 
version: Public Beta 1.0b !!FIXED 
vendor: http://www.webrc.ca/php/upb.php
status: notified

------------------------------------------------
summary: upb allow to have two `admin' accounts, 
but witn different access levels. its may 
aply with spoofing attacks. 
------------------------------------------------
 i have been register `admin' account within install procedure. it is have 
`Admin' permissions. later i was register `admin' again with normal way (via 
register.php) and upb dont output some error. but THIZ `admin' have a `member' 
permissions. 

solution (from ewgenij_sat_private)
---------

in register.php change 

      $c = count($d)-2; 

      with 

      $c = count($d)-1; 


regardz,
GooDWiN /tF0KP
----------------------------
www.security-ru.net

___________________________
origin: i'm not a lame,
         not yet a hacker ))


----
  http://www.rambler.ru

Next message: Matthew Murphy: "[Full-Disclosure] More OmniHTTPd Problems"
Previous message: Auriemma Luigi: "Blazix 1.2 jsp view and free protected folder access"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Aug 25 2002 - 10:19:42 PDT