Some vulnerabilities have been discovered in Chipmunk CMS, which can be exploited by malicious people to bypass certain security restrictions and conduct cross-site request forgery attacks.

1) The vulnerability is caused due to the "board/admin/reguser.php" script not being properly restricted to administrators. This can be exploited to e.g. add new administrative users by sending certain POST requests to the affected script.

2) The application allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. change user password, delete a category, or delete a forum by tricking an administrative user into visiting a malicious web site.

The vulnerabilities are confirmed in version 1.3. Other versions may also be affected.

Solution
Restrict access to the admin area (e.g. via ".htaccess"). Do not browse untrusted websites or follow untrusted links while logged in to the application.

Provided and/or discovered by
1) JosS
2) Milos Zivanovic

Changelog
Further details available to Secunia VIM customers

Original Advisory
1) http://milw0rm.com/exploits/6959
2) http://www.exploit-db.com/exploits/10419

Deep Links
Links available to Secunia VIM customers