ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1013400 | Patch Vendor Advisory |
Configurations
Information
Published : 2005-03-07 21:00
Updated : 2008-09-05 13:47
NVD link : CVE-2005-0747
Mitre link : CVE-2005-0747
JSON object : View
CWE
Products Affected
applyyourself
- i-class