Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web BBS :: etc :: tb13331.htm

Simple Machine Forum - Private section/posts/info disclosure



Simple Machine Forum - Private section/posts/info disclosure
Simple Machine Forum - Private section/posts/info disclosure



# Vulnerable: Simple Machine Forum [ALL Versions] =0D
#=0D
# Tested on SMF 1.1.4=0D
#=0D
# Type: Private Section,Posts,Information disclosure.=0D
#=0D
# Risk: Low / Medium=0D
#=0D
# Discovered By Seph1roth=0D
#=0D
# Site: http://www.blackroots.it -> The Best Hacking site. (eng / ita)=0D 
#=0D
# Explanation:=0D
#=0D
# If some section is rescricted only for staff,vips or private groups/members,this bug can be used for read entire section and message, without privileges.=0D
#=0D
# Example:=0D
#=0D
# In my forum i've a Staff area , and into that , there is a message that contain Bug,exploit or some others keywords...i'll put in the advanced search module # this keywords ,and i select "show results as messages"...and tadaaa...my priv8 zone can be read by everyone...=0D
#=0D
# Greetz to all BlackRoots users!=0D
#=0D
# Shoutz to all kiddies!


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH