Just look for "Virginity Security Advisory 2003-001" Besides: We do not secure virgins, our group name is just Virginity Security Research Center what has nothing to do with the human virginity but with the virginity of computers!!
Am 03.11.2003 17:53:03, schrieb Ron DuFresne <[EMAIL PROTECTED]> : > > When did we start securing virgins?!? > > Thanks, > > Ron DuFresne > > On 31 Oct 2003, Virginity Security wrote: > > > > > > > - - - -------------------------------------------------------------------- > > Virginity Security Advisory 2003-002 > > - - - -------------------------------------------------------------------- > > DATE : 2003-10-31 22:59 GMT > > TYPE : remote > > VERSIONS AFFECTED : <== Tritanium Bulletin Board 1.2.3 > > (http://www.tritanium-scripts.com/) > > AUTHOR : Virginity > > - - - -------------------------------------------------------------------- > > > > > > Description: > > > > I found a security bug in Tritanium Bulletin Board: > > Normal Users can read the content of Threads to which they have no access rights! > > (and can answer to it which may be a problem if the internal forum has the right > > to insert html code) > > > > Author of the Software has been notified. > > > > - - - -------------------------------------------------------------------- > > > > > > Example: > > > > http://[target].com/[path]/index.php?faction=reply&thread_id=[ID OF THE THREAD TO > > READ]&forum_id=[ID OF FORUM]&sid=[your sid] > > > > Shows the window where The Attacker can answer to the topic and below that a > > window with the content of the thread!!! > > The Attacker can easily read all protected Threads since the thread_id is counted > > for every forum newly so just put from 1 on upwards :-) > > > > - - - -------------------------------------------------------------------- > > > > > > Solution: > > Hey sorry this time i had no time for a solution :-) > > > > - - - -------------------------------------------------------------------- > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > "Cutting the space budget really restores my faith in humanity. It > eliminates dreams, goals, and ideals and lets us get straight to the > business of hate, debauchery, and self-annihilation." -- Johnny Hart > ***testing, only testing, and damn good at it too!*** > > OK, so you're a Ph.D. Just don't touch anything. > > > ------- Gesendet mit Konfiweb.de >und du siehst die Dinge anders _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
