Dante90 has discovered a vulnerability in the DB Management plugin for PunBB, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The vulnerability is caused due to the application allowing users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. create arbitrary users when a logged-in administrator visits a specially crafted web page.

The vulnerability is confirmed in version 1.3. Other versions may also be affected.

Solution
Do not browse untrusted web sites or follow untrusted links while logged-in to the application.

Provided and/or discovered by
Dante90

Original Advisory
http://packetstorm.linuxsecurity.com/0906-exploits/punbbapdb-sql.txt

Deep Links
Links available in Customer Area