CVE

Id
36834  
CVE No.
CVE-2008-6717  
Status
Candidate  
Description
U&M Software Signup 1.0 and 1.1 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) adminstart.php, (2) admineventtype.php, (3) admineventdetails.php, (4) admineventlist.php, (5) adminuserslist.php, (6) adminleaderslist.php, (7) admindatabase.php, and possibly (8) index.php.  
Phase
Assigned (20090413)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401197 36834 CVE-2008-6717 MILW0RM:7032  View
401198 36834 CVE-2008-6717 URL:http://www.milw0rm.com/exploits/7032  View
401199 36834 CVE-2008-6717 MISC:http://signup.uochm.com/features.php  View
401200 36834 CVE-2008-6717 BID:32166  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41994 JVNDB-2009-003001 AJ Square AJ Article の index.php における SQL インジェクションの脆弱性 AJ Square AJ Article の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-6721 36834 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003001.html  View