exploits , vulnerabilities , articles , PHP-Nuke Delete God Admin Access Control Bypass Vulnerability

Title	PHP-Nuke Delete God Admin Access Control Bypass Vulnerability
Published	2004-08-04-12:00AM
Updated	2004-08-04-06:20PM
Class	Access Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery of this vulnerability is credited to ahmad muammar <y3dips@echo.or.id>.
Vulnerable	Francisco Burzi PHPNuke 7.3 Francisco Burzi PHPNuke 7.2 Francisco Burzi PHPNuke 7.1 Francisco Burzi PHPNuke 7.0 FINAL Francisco Burzi PHPNuke 7.0 Francisco Burzi PHPNuke 6.9 Francisco Burzi PHPNuke 6.7 Francisco Burzi PHPNuke 6.6 Francisco Burzi PHPNuke 6.5 RC3 Francisco Burzi PHPNuke 6.5 RC2 Francisco Burzi PHPNuke 6.5 RC1 Francisco Burzi PHPNuke 6.5 FINAL Francisco Burzi PHPNuke 6.5 BETA 1 Francisco Burzi PHPNuke 6.5 Francisco Burzi PHPNuke 6.0 Francisco Burzi PHPNuke 5.6 Francisco Burzi PHPNuke 5.5 Francisco Burzi PHPNuke 5.4 Francisco Burzi PHPNuke 5.3.1 Francisco Burzi PHPNuke 5.2 a Francisco Burzi PHPNuke 5.2 Francisco Burzi PHPNuke 5.1 Francisco Burzi PHPNuke 5.0.1 Francisco Burzi PHPNuke 5.0 Francisco Burzi PHPNuke 4.4.1 a Francisco Burzi PHPNuke 4.4 Francisco Burzi PHPNuke 4.3 Francisco Burzi PHPNuke 4.0 Francisco Burzi PHPNuke 3.0 Linux kernel 2.2 Francisco Burzi PHPNuke 2.5 Francisco Burzi PHPNuke 1.0 Francisco Burzi PHPNuke 0.726 3 Francisco Burzi PHPNuke 0.75 RC3
Not Vulnerable
Code	The following example is available: http://www.example.com/phpnuke/admin.php?op=deladmin2&del_aid=dudul Where "dudul" is the name of the target "God Admin" account.
TXT

Vulnerabilities - newest 10 RSS | More

• 2008-08-29 Invision Power Board Multiple Remote Security Vulnerabilities
• 2008-08-29 MySpell Insecure Temporary File Creation Vulnerability
• 2008-08-29 LinuxTrade Insecure Temporary File Creation Vulnerabilities
• 2008-08-29 Liquidsoap Insecure Temporary File Creation Vulnerability
• 2008-08-29 LMbench Insecure Temporary File Creation Vulnerabilities
• 2008-08-29 MAFFT Insecure Temporary File Creation Vulnerability
• 2008-08-29 Debian dhis-server Insecure Temporary File Creation Vulnerability
• 2008-08-29 ARB Multiple Insecure Temporary File Creation Vulnerabilities
• 2008-08-29 Apertium Multiple Insecure Temporary File Creation Vulnerabilities
• 2008-08-29 Caudium Insecure Temporary File Creation Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 30 Aug 2008 14:20:40 +0000