20031031 Virginity Security Advisory 2003-002 : Tritanium Bulletin Board - Read and write from/to internal (protected) Threadsmailing list
http://archives.neohapsis.com/archives/bugtraq/2003-10/0348.html CVE-2003-1162
Tritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized Access
Record summary
CVE-2003-1162 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
index.php in Tritanium Bulletin Board 1.2.3 allows remote attackers to read and reply to arbitrary messages by modifying the thread_id, forum_id, and sid parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTritanium Scripts Tritanium Bulletin Board 1.2.3 - Unauthorized AccessExploitDB exploitby Virginity SecurityNot analyzed1 file
References
610135Third-party advisory
http://secunia.com/advisories/10135 2770vdb entry
http://www.osvdb.org/2770 8944vdb entry
http://www.securityfocus.com/bid/8944 tritanium-threadid-view-messages(13587)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/13587 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2003-1162