bugtraq - [KAPDA::#55] - Joomla poll component vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 18 Aug 2006 09:37:28 -0700 (PDT)
From: alireza hassani <trueend5@...oo.com>
To: bugtraq@...urityfocus.com
Subject: [KAPDA::#55] - Joomla poll component vulnerability

KAPDA New advisory

Vendor: http://www.joomla.org
Vulnerable: 1.0.10 (prior versions also maybe
Affected) 
Bug: user session validation weakness
Exploitation: Remote with browser
Poc: available 

Description: 
--------------------
>From vendorâs website.
Joomla! is an award-winning Content Management System
(CMS) that will help you build websites and other
powerful online applications. Best of all, Joomla! is
an open source solution that is freely available to
everybody.

Vulnerability:
--------------------
There is a logical weakness in the codes of poll
component ( pollAddVote Function )and initSession();
that may allow remote users to vote an option
repeatedly in a short time without any restriction.
Even itâs possible to vote an unpublished poll Item.

Original advisory and Poc:
--------------------
http://www.kapda.ir/advisory-407.html

Solution:
--------------------
Vendor was informed via official Bug Report on the
official  1.0.x Bug Tracker
 But there is no vendor supplied patch at this time.

Credit :
--------------------
Discovered & released by trueend5 (trueend5 kapda ir)
Security Science Researchers Institute Of Iran
[http://www.KAPDA.ir] 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com