Waraxe IT Security Portal

migo79 · Regular user

hey waraxe
you are always overhelming me with your answers , this time when i was reading an old advisory written by you about getting easy admin right in phpnuke using BBcodes in phpbb

now by the most of the phpbb codes fixed against this exploit
and if you try to post a new a malicious BBcode without the extension of the image it is not working
but sure it will work if you use the advanced features of the great apache web server

there is advanced technique in apache to redirect the victim to another location which will execute the malicious URL (radminsuper), and this is working great for me till now (using the advanced technique)

my question is
what is the the direct URL used in phpbb to promote a normal user ( a known userid) account into administrator account?
i mean the direct url to be executed instead of (radminsuper=1) in nuke ?

best regards
migo

waraxe · Site admin

Please be more specific - what exactly you want to do? Do you want to escalate your phpBB user privileges in integrated PhpNuke module?
And in which way? Through BBCode IMG tag?

migo79 · Regular user

yes waraxe
exactly what u say, but instead of the integrated phpbb
i wanna use the image tag to promote my userid in another installation of phpbb

waraxe · Site admin

PhpBB is written is secure way, so any critical operations, as user
permission management is, are handled through POST variables.
If you use IMG tags, you can make only GET requests. So in PhpBB
there is no simple way to attack like this.