Secunia

Two vulnerabilities have been identified in PY-Membres allowing malicious people to gain admin access or manipulate SQL queries.

1) The script "admin/admin.php" doesn't verify users properly. This makes it possibly to gain admin access by setting the "adminpy" parameter to "1".

2) It is possible to manipulate the "email" parameter in "pass_done.php" so that the SQL query is altered. This could be exploited to create a file with all usernames and passwords, which potentially could be retrieved via HTTP.

The vulnerabilities have been reported in versions 4.0, 4.1, and 4.2.

Solution
Edit the source code so that input is verified properly.

Provided and/or discovered by
frog-m@n

Deep Links
Links available in Customer Area