Security holes in Powerboard forum

[frog frog <leseulfrog () hotmail com>]

Product :
Powerboards
http://powerboards.sourceforge.net/

Versions :
2.2b (and less ?)

Problems :
- Cross Site Scripting
- Path disclosure
- Access to the administration
- Access to users accounts without password
- Recovery  of admins/users passwords
- Suppression of messages
- Writing on the hard disk

More details :
in french :
http://www.ifrance.com/kitetoua/tuto/powerboards.txt

translated by Google :
http://translate.google.com/translate?u=http%3A%
2F%2Fwww.ifrance.com%2Fkitetoua%2Ftuto%
2Fpowerboards.txt&langpair=fr%7Cen&hl=fr&prev=%
2Flanguage_tools


frog-m@n