Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
References
Link | Resource |
---|---|
http://securitytracker.com/id?1013570 | Patch |
Configurations
Information
Published : 2005-05-01 21:00
Updated : 2008-09-05 13:47
NVD link : CVE-2005-0915
Mitre link : CVE-2005-0915
JSON object : View
CWE
Products Affected
webmasters-debutants
- wd_guestbook