Related information

CGI bugs

SunSop: cross-site-scripting bug

Security holes : Linker, Pharao

Security holes  : D-Book, CBook, IcrediBB

SWS Vuln (small but important to those using it.)

From:	frog frog <leseulfrog_(at)_hotmail.com>
Date:	09.04.2002
Subject:	Security holes in Powerboard forum

Product :

Powerboards

http://powerboards.sourceforge.net/



Versions :

2.2b (and less ?)



Problems :

- Cross Site Scripting

- Path disclosure

- Access to the administration

- Access to users accounts without password

- Recovery  of admins/users passwords

- Suppression of messages

- Writing on the hard disk



More details :

in french :

http://www.ifrance.com/kitetoua/tuto/powerboards.txt



translated by Google :

http://translate.google.com/translate?u=http%3A%

2F%2Fwww.ifrance.com%2Fkitetoua%2Ftuto%

2Fpowerboards.txt&langpair=fr%7Cen&hl=fr&prev=%

2Flanguage_tools





frog-m@n