Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[Full-disclosure] Invision Power Board 1.x and 2.x Privilege Escalation

from [Rapigator] Network Security [Permanent Link]
Subject: [Full-disclosure] Invision Power Board 1.x and 2.x Privilege Escalation Vulnerability
Date: Sat, 28 May 2005 00:55:30 -0700 
If an non-root admin goes to delete their own group, they are taken to a
screen that says "*Move users in this group to..." in which they can
select the root admin group and move themselves into it. actually, they
can move all users in any group into the root admin group

root admins have complete access to the database where regular admins do
not. they can run their own queries directly though invisionboard's "SQL
Toolbox" or download the database. only root admins can edit other root
admins' accounts.


This affects :
Invision Power Services Invision Board 1.0
Invision Power Services Invision Board 1.0.1
Invision Power Services Invision Board 1.1.1
Invision Power Services Invision Board 1.1.2
Invision Power Services Invision Board 1.2
Invision Power Services Invision Board 1.3 Final
Invision Power Services Invision Board 1.3
Invision Power Services Invision Board 1.3
Invision Power Services Invision Board 1.3.1 Final
Invision Power Services Invision Board 2.0 PF2
Invision Power Services Invision Board 2.0 PF1
Invision Power Services Invision Board 2.0 PDR3
Invision Power Services Invision Board 2.0 Alpha 3
Invision Power Services Invision Board 2.0
Invision Power Services Invision Board 2.0.1
Invision Power Services Invision Board 2.0.2
Invision Power Services Invision Board 2.0.3
Invision Power Services Invision Board 2.0.4
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • [Full-disclosure] Invision Power Board 1.x and 2.x Privilege Escalation Vulnerability, Rapigator <=
Previous by Date:  [Full-disclosure] XSS Bug in Jaws Glossary Action: ViewTerm ( v 0.4 - 0.5.1 (latest version)), Nah
Next by Date:  [Full-disclosure] Nordstroms.com security contact, t3rm1nal3ntry
Previous by Thread:  [Full-disclosure] XSS Bug in Jaws Glossary Action: ViewTerm ( v 0.4 - 0.5.1 (latest version)), Nah
Next by Thread:  [Full-disclosure] Nordstroms.com security contact, t3rm1nal3ntry
Indexes:  [Date] [Thread] [Top] [All Lists]