Ravens PHP Scripts - MKPortal Shoutbox Message Cross-Site Request Forgery

SECUNIA ADVISORY ID: SA23431

VERIFY ADVISORY: http://secunia.com/advisories/23431/

CRITICAL: Less critical

IMPACT: Cross Site Scripting

SOFTWARE: MKPortal 1.x - http://secunia.com/product/9502/

DESCRIPTION: Demential has discovered a vulnerability in MKPortal, which can be exploited by malicious people to conduct cross-site request forgery attacks.

The application allows administrators to perform certain actions via HTTP requests without performing any validity checks to verify the request. This can e.g. be exploited to delete arbitrary shoutbox messages when an administrator logs in. Successful exploitation requires that the target is a valid user. The vulnerability is confirmed in version 1.1.1 (installed on phpBB). Other versions may also be affected.

SOLUTION: Edit the source code to ensure that input is properly sanitised.

PROVIDED AND/OR DISCOVERED BY: Demential