PT-2002-2552 · Openbb · Openbb

Published 2002-12-31 · Updated 2016-10-18 · CVE-2002-1830

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open Bulletin Board (OpenBB) version 1.0.0 RC3

Description The issue allows remote attackers to bypass authentication and access modifier options. This is achieved by making a direct request to the "moderator.php" endpoint with the action and ismod parameters.

Recommendations For OpenBB version 1.0.0 RC3, consider restricting access to the "moderator.php" endpoint until a patch is available. As a temporary workaround, avoid using the action and ismod parameters in the affected endpoint to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1830

Affected Products

Openbb

References · 5

• 🔥 https://exploit-db.com/exploits/21478 · Exploit
• 🔥 http://securityfocus.com/bid/4823 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1830 · Security Note
• http://marc.info/?l=vuln-dev&m=102221487407632&w=2 · Note
• http://iss.net/security_center/static/9160.php · Note