BoastMachine v3.0 platinum - Session d Hacking

Credit: Vagrant
Risk: Medium
Local: No
Remote: Yes

CVSS Base Score: 6.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8/10
Exploit range: Remote
Attack complexity: Low
Authentication: Single time
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

Vagrant - (05.22.2007) BoastMachine v3.0 platinum - Session d Hacking After the login into the site which alllows new user registration. Site user's data which is entered to change the topic, can be changed by another user, and that is a security hole because of ID interchangeability in URL address space. If the changed topic belongs to the admin it doedn't affect the free login and site user has an authority to make changes and cop the topics. ------- >>> Vulnerable; Edit posts; Post title edit; = (d) New d; = (d) Credits : Vagrant Contact : kernel-32 (at) hotmail (dot) com [email concealed] Site : _________________________________________________________________ Siz de iletiþimin evrimine katln!

Vote for this issue:


Thanks for you vote!


Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2017,


Back to Top