|
Powerboards Cookie Manipulation Account Compromise Vulnerability
Powerboards use cookies for authentication, and are saved in a non-encrypted format. It is possible for a malicious user to manipulate values in their cookie to gain access to Powerboards as any user. Successful hijacking of user accounts will permit the malicious user to take various actions as the unknowing user. It should be noted that it is possible to log in as the administrator, and gain access to admin resources. |
|
|
Privacy Statement |
