Dambudziko rakawanikwa mu open-source forum engine phpBB. Dambudziko iri rinobvumira chikumbiro chimwe chete cheHTTP kubatana nechero chikamu chemushandisi weforum. Dambudziko iri rinokanganisa default phpBB configuration. Dambudziko iri rakagadziriswa mu phpBB version 3.3.17.
Kurwisa vashandisi venguva dzose kunogona kutungamira mukuwana mameseji epachivande uye kugona kutumira mameseji panzvimbo yavo. Kurwisa vatungamiriri nevatungamiriri kunogona kutungamira mukudzima mameseji evamwe vanhu, kuona IP kero uye email, kuverenga tsamba dzepachivande, asi haugone kupinda mu admin interface wobva wasvika kune host.
Ruzivo rwekukuvadzwa kwedata haruna kupihwa, asi uchishandisa AI zvichibva pa patch, nzira yekushandisa data yakatogadzirwazve. Iyi nzira yekushandisa data inodana "login_link" handler, inoisa nzira yekusimbisa data kuita "auth_provider=apache," uye inotsiva login kuburikidza neBasic Auth. PHP ichaisa environment variable "PHP_AUTH_USER=login," uye phpBB ichabvisa login yemushandisi kubva mairi pasina kusimbiswa kwepassword. Semuenzaniso, kuti uwane session ID yemushandisi we "admin" uye woichengeta ku cookies.txt file, unogona kushandisa kodhi inotevera:
kumona -i -s \
-c makuki.txt \
-b makuki.txt \
-u 'admin:chero chinhu' \
-d 'login=Login&login_username=admin&login_password=chero chinhu' \
'https://target.example/forum/ucp.php?mode=login_link&auth_provider=apache&login_link_any=1'
Source: opennet.ru
