bugtraq - Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1110226219.10990.1.camel@solaris.skunkware.org>
Date: Mon, 07 Mar 2005 13:10:19 -0700
From: comsatcat <comsatcat@...thlink.net>
To: thephuket@...mac.com
Cc: bugtraq@...urityfocus.com
Subject: Re: phpBB 2.0.12 Session Handling Administrator Authentication
	Bypass Exploit


On Mon, 2005-03-07 at 10:37 -0700, thephuket@...mac.com wrote:
> Just a simple Perl Script for this exploit. 
> I hope it is usefull for some of you  
> 
> 
> ------------------------------------------------------------------------------------------------
> 
> #!/usr/bin/perl
> 
> #   phpBB 2.0.12 Session Handling Administrator Authentication
> #   Bypass EXPLOIT

Also works against 2.0.13.