PT-2002-2552 · Openbb · Openbb

Publicado 2002-12-31 · Atualizado 2016-10-18 · CVE-2002-1830

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Bulletin Board (OpenBB) version 1.0.0 RC3

Description The issue allows remote attackers to bypass authentication and access modifier options. This is achieved by making a direct request to the "moderator.php" endpoint with the action and ismod parameters.

Recommendations For OpenBB version 1.0.0 RC3, consider restricting access to the "moderator.php" endpoint until a patch is available. As a temporary workaround, avoid using the action and ismod parameters in the affected endpoint to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1830

Produtos afetados

Openbb

Referências · 5

• 🔥 https://exploit-db.com/exploits/21478 · Exploit
• 🔥 http://securityfocus.com/bid/4823 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1830 · Nota de Segurança
• http://marc.info/?l=vuln-dev&m=102221487407632&w=2 · Nota
• http://iss.net/security_center/static/9160.php · Nota