https://www.exploit-db.com/exploits/21478
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200212-569

OpenBB是一款由PHP编写的Web论坛程序，可使用在Unix和Linux操作系统下，也可使用在MicrosoftWindows操作系统下。OpenBB对用户提供给moderator.php脚本的数据未进行正确充分的检查，可导致远程攻击者未授权进行管理员操作。OpenBB对moderator.php脚本的操作没有很正确的限制，攻击者通过修改moderator.php脚本中几个属性，就可以未授权以管理员权限操作论坛功能。

source: http://www.securityfocus.com/bid/4823/info

OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.

OpenBB is reported to be vulnerable to a condition that will allow an unauthorized user to gain moderator or administrative access to forums. The attacker is only able to change a few properties of the forums. 

http://www.site.com/moderator.php?action=lock&TID=LIDDUFORUM&ismod=1

This will lock the forum. Other keywords include 'action=sticky' or 'action=important'.

来源:BID
名称:4823
链接:http://www.securityfocus.com/bid/4823
来源:XF
名称:openbb-admin-access(9160)
链接:http://www.iss.net/security_center/static/9160.php
来源:VULN-DEV
名称:20020523SecurityholesinOpenBB
链接:http://marc.theaimsgroup.com/?l=vuln-dev&m;=102221487407632&w;=2
来源：NSFOCUS
名称：2837
链接：http://www.nsfocus.net/vulndb/2837