bugtraq - Vbulletin Cms (Sendmessage.php Page) 0Day Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201604130759.u3D7x3Lv024588@sf01web3.securityfocus.com>
Date: Wed, 13 Apr 2016 07:59:03 GMT
From: iedb.team@...il.com
To: bugtraq@...urityfocus.com
Subject: Vbulletin Cms (Sendmessage.php Page) 0Day Exploit

Csrf & Dos Vulnerability in Vbulletin 4.* Version
tested on 4.2 Vbulletin Version


#################################

#
#     @@@    @@@@@@@@@@@    @@@@@           @@@@@@@@@@            @@@  @@@@@@@
#     @@@    @@@@@@@@@@@    @@@  @@         @@@     @@            @@@  @@@@@@@@  
#     @@@    @@@            @@@    @@       @@@       @@          @@@  @@@  @@@  
#     @@@    @@@            @@@      @@     @@@     @@            @@@  @@@  @@@  
#     @@@    @@@@@@@@@@@    @@@       @     @@@@@@@@@@            @@@  @@@@@@
#     @@@    @@@@@@@@@@@    @@@     @@      @@@     @@            @@@  @@@@@@
#     @@@    @@@            @@@   @@        @@@       @@   @@@    @@@  @@@ @@@
#     @@@    @@@            @@@ @@          @@@     @@     @@@    @@@  @@@  @@@
#     @@@    @@@@@@@@@@@    @@@@@           @@@@@@@@@@     @@@    @@@  @@@   @@@
#

#####################################

#####################################

#         Iranian Exploit DataBase

# Vbulletin Cms (Sendmessage.php Page) 0Day Exploit

# Vulnerability : Csrf & Dos

# Version Tag Plugin : 4.*

# tested : 4.2

# Vendor site : https://www.vbulletin.com/

# Author : IeDb.Ir

# Site : Www.IeDb.Ir   -   Www.IeDb.Ir/acc   -   xssed.Ir   -   kkli.ir

# Vulnerability attack information site : http://xssed.Ir/

# Archive Exploit = http://kkli.ir/FN41o

#####################################

Bug :

http://www.site.com/vb/sendmessage.php?do=dosendtofriend&t=userid[Csrf/dos]

Description :

Please visit the site.
Then by a thread.
Then click on the Send this topic for others.
You can then use This bugs.

The security problems in vbulletin system is available, disrupt the system.
Sendmessage.php page csrf is also a security problem.

[Csrf]
Using bugs csrf you can create a form by using the username and securitytoken a user to send email to other Nmayyd.nvshtn is a very simple and methodically post code at the bottom would say, just do it now.

[Dos]

Dos bug on this page is available, you can call a large number of variables, create disorder in the system.

URL:
sendmessage.php?do=dosendtofriend&t=userid

The information is also sent to the server:

sendtoname=iedb.ir&sendtoemail=iedb.team@...il.com&emailsubject=title Post&emailmessage=%3A%0D%0A%2Fshowthread.php%3Ft%3Dhttp%3A%2F%2Fwww.iedb.ir%2Fshowthread.php%3Ft%3D163728%26referrerid%3D65924%26referrerid%3D65924%0D%0A%0D%0AAz+tarafe%2C%0D%0AIrIsT%0D%0A++Team%0D%0A&s=&securitytoken=1460531151-922843b458f72dcc3d9867d2f088c4f4dfd7cc0c&do=dosendtofriend&t=163728&url=[Dos]

--------------

Exploit is private.
The exploit only to send the news and is also in the process of this vulnerability.
To request exploits, stay tuned with us:

http://iedb.ir

http://iedb.ir/acc/

http://irist.ir

http://xssed.ir

email : iedb.team@...il.com

tnks to : All Member In Iedb.ir and Iedb.ir/acc and And all the other friends that are associated with our team.

#####################################

#  Archive Exploit = http://iedb.ir/exploits-5030.html

#####################################