CVE

Id
26132  
CVE No.
CVE-2007-2775  
Status
Candidate  
Description
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php.  
Phase
Assigned (20070521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
263096 26132 CVE-2007-2775 MILW0RM:3957  View
263097 26132 CVE-2007-2775 URL:http://www.milw0rm.com/exploits/3957  View
263098 26132 CVE-2007-2775 MISC:http://itablackhawk.altervista.org/exploit/alsoft_exploit_pack  View
263099 26132 CVE-2007-2775 BID:24073  View
263100 26132 CVE-2007-2775 URL:http://www.securityfocus.com/bid/24073  View
263101 26132 CVE-2007-2775 OSVDB:36638  View
263102 26132 CVE-2007-2775 URL:http://osvdb.org/36638  View
263103 26132 CVE-2007-2775 SECUNIA:25337  View
263104 26132 CVE-2007-2775 URL:http://secunia.com/advisories/25337  View
263105 26132 CVE-2007-2775 XF:alstrasoft-livesupport-manag-info-disclosure(34395)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53358 JVNDB-2007-002050 AlstraSoft Template Seller Pro の admin/addsptemplate.php における無制限にファイルをアップロードされる脆弱性 AlstraSoft Template Seller Pro の admin/addsptemplate.php は、無制限にファイルをアップロードされる脆弱性が存在します。 CVE-2007-2777 26132 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002050.html  View