FreeBSD : phpbb - Insuffient check against HTML code in usercp_register.php (4a0b334d-8d8d-11d9-afa0-003048705d5a)

NASLDB: FreeBSD : phpbb - Insuffient check against HTML code in usercp_register.php (4a0b334d-8d8d-11d9-afa0-003048705d5a)

General

ID: 18926
Name: FreeBSD : phpbb – Insuffient check against HTML code in usercp_register.php (4a0b334d-8d8d-11d9-afa0-003048705d5a)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

Neo Security Team reports :

If we specify a variable in the html code (any type : hidden, text,
radio, check, etc) with the name allowhtml, allowbbcode or
allowsmilies, is going to be on the html, bbcode and smilies in our
signature.

This is a low risk vulnerability that allows users to bypass
forum-wide configuration.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2005/02/28
Patch Release: 2005/03/05
Plugin Release: 2005/07/13

Plugin

Version: 1.8
Filename: freebsd_pkg_4a0b334d8d8d11d9afa0003048705d5a.nasl
Filesize: 4466 bytes
MD5 Hash: 892980bb21d851f4a37d38d4eacc9395

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"