phpBB 3.0.11 CSRF Vulnerability

phpBB 3.0.11  CSRF  vulnerability
------------------------------------------------------------
 
== Description ==
- Software link:https://www.phpbb.com/downloads/
- Affected versions: version  3.0.11 .other versions might be affected as well.
- Vulnerability discovered by: Mehdi Dadkhah(Isfahan)(Email: [email protected])
-Google Dork: intext:"Powered by phpBB® Forum Software © phpBB Group"


== Vulnerabilities  with proof of concept ==
1)CSRF:
An attacker may force the users of a web application to execute actions of the attacker's choosing. A successful CSRF exploit can compromise 
end user data and operation in case of normal user. If the targeted end user is the administrator account, this can compromise the entire web
application.

Form name: <empty>
Form action: http://site.com/ucp.php?mode=login&sid=d64a926ae04907bfacff2106f4cc6717
Form method: POST

Form inputs:
username [Text]
password [Password]
autologin [Checkbox]
login [Submit]
redirect [Hidden]

== Solution ==
check code and correct errors.

#  0day.today [2018-03-02]  #