OSVDB ID: 41322

Title: Invision Power Board sources/classes/paymentgateways/class_gw_paypal.php Arbitrary User Privilege Level Manipulation

Info

Disclosure

Sep 11, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2007-4914 (see also: NVD)
Bugtraq ID: 25656
Secunia Advisory ID: 26788
ISS X-Force ID: 36590
Related OSVDB ID: 41319 41320 41321 41323 41324
Vendor Specific News/Changelog Entry: http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870
Other Advisory URL: http://forums.invisionpower.com/index.php?showtopic=237075

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/41322