Zoints Tags Vulnerability [Sitemap] - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

PDA

View Full Version : Zoints Tags Vulnerability


class101
25-12-07, 16:06
Yesterday I have found an enough critical vulnerability to the Zoints Tag addon for vbulletin wich has been confirmed by the developers, so if you are running Zoints Tag version 1.2.1, you should immediately upgrade to Zoints 1.2.2 here (http://www.vbulletin.org/forum/showthread.php?p=1408418).
Basically, the bug was allowing any guests to delete any tags with only 2 requests.