frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified values to the (1) Mehr and (2) SUPER parameters.
References
Configurations
Information
Published : 2007-11-20 12:46
Updated : 2018-10-15 14:49
NVD link : CVE-2007-6056
Mitre link : CVE-2007-6056
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
aida-orga
- aida-web