CVE

Id
36835  
CVE No.
CVE-2008-6718  
Status
Candidate  
Description
U&M Software JustBookIt 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) user_manual.php, (2) user_config.php, (3) user_kundnamn.php, (4) user_kundlista.php, (5) user_aktiva_kunder.php, (6) database.php, and possibly (7) index.php.  
Phase
Assigned (20090413)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401201 36835 CVE-2008-6718 MILW0RM:7033  View
401202 36835 CVE-2008-6718 URL:http://www.milw0rm.com/exploits/7033  View
401203 36835 CVE-2008-6718 BID:32166  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49928 JVNDB-2008-005238 Novell Access Manager におけるログインセッションを取得される脆弱性 Novell Access Manager は、X.509 証明書のセッションを適切に失効しない、および Apache Tomcat が SSL キャッシュからエントリクリア不能に関する不備があるため、ログインセッションを取得される脆弱性が存在します。 CVE-2008-6722 36835 1.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005238.html  View