Информационная безопасность
[RU] switch to English

Дополнительная информация

  Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl)

  [SA21543] mail f/w system Mail Header Injection Vulnerability

  [SA21604] Drupal E-commerce Module Script Insertion Vulnerabilities

  [SA21603] Drupal Easylinks Module Script Insertion and SQL Injection

  [SA21584] Empire CMS "check_path"
File Inclusion Vulnerability

From:alireza hassani <trueend5_(at)_yahoo.com>
Date:21 августа 2006 г.
Subject:[KAPDA::#55] - Joomla poll component vulnerability

KAPDA New advisory

Vendor: http://www.joomla.org
Vulnerable: 1.0.10 (prior versions also maybe
Bug: user session validation weakness
Exploitation: Remote with browser
Poc: available

>From vendora€™s website.
Joomla! is an award-winning Content Management System
(CMS) that will help you build websites and other
powerful online applications. Best of all, Joomla! is
an open source solution that is freely available to

There is a logical weakness in the codes of poll
component ( pollAddVote Function )and initSession();
that may allow remote users to vote an option
repeatedly in a short time without any restriction.
Even ita€™s possible to vote an unpublished poll Item.

Original advisory and Poc:

Vendor was informed via official Bug Report on the
official  1.0.x Bug Tracker
But there is no vendor supplied patch at this time.

Credit :
Discovered & released by trueend5 (trueend5 kapda ir)
Security Science Researchers Institute Of Iran

Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород