ثغرة في منتديات vb بتاريخ 2010-08-29

[prosk]

ثغرة في منتديات vb بتاريخ 2010-08-29

vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability

================================================== =============





01010101010101010101010101010101010101010101010101 0101010

0 0

1 Iranian Datacoders Security Team 2010 1

0 0

01010101010101010101010101010101010101010101010101 0101010





# Exploit Title: vBulletin 3.8.4 & 3.8.5 Around Registration Vulnerability

# Date: 29/08/2010

# Author: Immortal Boy

# Software Link: []

# Version: 3.8.4 & 3.8.5

# Google dork 1 : powered by vBulletin 3.8.4

# Google dork 2 : powered by vBulletin 3.8.5

# Platform / Tested on: Multiple

# Category: ***applications

# Code : N/A



# BUG : ################################################## #######################



1 > Go to [][localhost]/path/register.php



2 > Assume that forum admin user **** is ADMIN



3 > Type this at User **** ===> ADMIN*****



4 > ***** is an ASCII Code



5 > And complete the other parameters



6 > Then click on Complete Registrarion



7 > Now you see that your user **** like admin user ****



After this time the private messages to the user (ADMIN) to sending see for you is sending .





# Patch : ################################################## #####################



1 > Go to AdminCP



2 > Click on vBulletin Options and choose vBulletin Options



3 > Choose Censorship Options



4 > type &# in Censored Words section



5 > Then click on Save



################################################## ###########################



Our ***site : []



Special Thanks to : H-SK33PY , NEO , Sp|R|T , BigB4NG , 3r1ck , Dr.mute ,



hosinn , NIK , uones , mohammad_ir & all iranian datacoders members



################################################## ####################


المصدر
[]
تحيااتي للجميع

[Gulussa]

يعطيك العاافي اخي الغالي
نورت المنتدى
ثغرة روووعة
وجااري الاختراق

[raouf160]

thanks so much man

[Microsoft-Dz]

**** لك تحياتي

[doubleali]

السلام عليكم بس هذي الثغره ما تعطيك صلاحيه الادمن نهائيا بس باللاسم