CVE

Id
23689  
CVE No.
CVE-2007-0332  
Status
Candidate  
Description
(1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request.  
Phase
Assigned (20070117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
230094 23689 CVE-2007-0332 BUGTRAQ:20070114 liens_dynamiques xss and admin authentification  View
230095 23689 CVE-2007-0332 URL:http://www.securityfocus.com/archive/1/archive/1/456986/100/0/threaded  View
230096 23689 CVE-2007-0332 BID:22068  View
230097 23689 CVE-2007-0332 URL:http://www.securityfocus.com/bid/22068  View
230098 23689 CVE-2007-0332 OSVDB:33541  View
230099 23689 CVE-2007-0332 URL:http://osvdb.org/33541  View
230100 23689 CVE-2007-0332 OSVDB:33542  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54541 JVNDB-2007-003233 Ingate Firewall などの SIP モジュールにおける認証メカニズム上で再生攻撃を実行される脆弱性 Ingate Firewall および SIParator の SIP モジュールには、認証メカニズム上で再生攻撃を実行される脆弱性が存在します。 CVE-2007-0334 23689 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003233.html  View