----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Simple Machines Forum Mod Seo4SMF Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA33481

VERIFY ADVISORY:
http://secunia.com/advisories/33481/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting, Manipulation of data

WHERE:
>From remote

SOFTWARE:
Seo4SMF 0.x (mod for Simple Machines Forum)
http://secunia.com/advisories/product/20995/

DESCRIPTION:
Some vulnerabilities have been reported in the Seo4SMF mod for Simple
Machines Forum, which can be exploited by malicious people to conduct
SQL injection, cross-site request forgery, and cross-site scripting
attacks.

1) Input passed to the "t", "b", "u", and "p" parameters in
seo4smf-redirect.php is not properly sanitised before being used in
SQL queries. This can be exploited to manipulate SQL queries by
injecting arbitrary SQL code.

2) Input passed to the "a" parameter in seo4smf-redirect.php is not
properly sanitised before being returned to the user. This can be
exploited to insert arbitrary HTTP headers, which will be included in
a response sent to the user, allowing for execution of arbitrary HTML
and script code in a user's browser session in context of an affected
site.

3) The application allows users to perform certain actions via HTTP
requests without performing any validity checks to verify the
requests. This can be exploited to e.g. modify the .htaccess file by
tricking the user into visiting a malicious web site.

SOLUTION:
Update to version 0.2.9.10, which fixes some of the vulnerabilities.

Do not browse untrusted sites while being logged on to the
application.

PROVIDED AND/OR DISCOVERED BY:
WHK

ORIGINAL ADVISORY:
WHK:
http://milw0rm.com/exploits/7723

Seo4SMF:
http://www.webmasterstalks.com/seo-4-smf/seo4smf-2-9-10-t1700.0.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------