'''
__ __ ____ _ _ ____
| \/ |/ __ \ /\ | | | | _ \
| \ / | | | | / \ | | | | |_) |
| |\/| | | | |/ /\ \| | | | _ <
| | | | |__| / ____ \ |__| | |_) |
|_| |_|\____/_/ \_\____/|____/
http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/
'''
Abysssec Inc Public Advisory
Title : FreeDiscussionForums Multiple Remote Vulnerabilities
Affected Version : Free Discussion Forum 1.0
Discovery : www.abysssec.com
Vendor : http://www.freediscussionforums.net
Download Links : http://sourceforge.net/projects/discusionforum/
Admin Login : http://Example.com/adminlogin.aspx
Description :
===========================================================================================
This version of FreeDiscussionForums have Multiple Valnerabilities :
1- Access to Admin's Section
2- Persistent XSS
Access to Admin's Section:
===========================================================================================
With this path you can easily access to Admin's section:
http://Example.com/ManageSubject.aspx
Valnerable Code :
DLL : App_Web_wngcbiby.dll
Class : Class adminlogin
protected void Button1_Click(object sender, EventArgs e)
{
...
if ((this.txtUserName.Text.Trim() == str) && (this.txtPassword.Text.Trim() == str2))
{
this.Session["User"] = "admin";
base.Response.Redirect("ManageSubject.aspx");
}
}
Persistent XSS:
===========================================================================================
in this application also there is a Persistent XSS exist in title field.
Valnerable Code :
DLL : App_Web_wngcbiby.dll
Class : Class AddPost
protected void Page_Load(object sender, EventArgs e)
{
if (base.Request.QueryString["forumId"] != null)
{
this.forumId = Convert.ToInt32(base.Request.QueryString["forumId"]);
}
if (base.Request.QueryString["title"] != null)
{
this.title = Common.ReplaceString(base.Request.QueryString["title"].ToString().Trim());
}
...
}
===========================================================================================
