Vijilante
SubAdmin
Joined: 18 Nov 2001
Posts: 5182
|
 Posted: Sun Jul 20, 2003 7:57 am
Forum security bug
|
Finally got around to visitting the Snitz forums after reading about a password security bug on another site. The version is the one we currently use, but the fix shown at Snitz was dated prior to Zugg's mention of the new forums being in. Just wanted to ask.
Exploit
quote:
This is the most serious of the vulns, as it requries no
real effort and leaves the entire snitz forum open to attack.
All an attacker has to do is request a forgotten password, save
the password reset page offline,edit the member id to the desired
member id, and submit the form. The members password will then
be reset to that of the attackers choosing.
Snitz fix link: http://forum.snitz.com/forum/topic.asp?TOPIC_ID=45275 |
|
