CVE

Id
36836  
CVE No.
CVE-2008-6719  
Status
Candidate  
Description
U&M Software Event Lister (aka JustListIt) 1.0 does not require administrative authentication for all scripts in the admin/ directory, which allows remote attackers to have an unspecified impact via a direct request to (1) start.php, (2) aktivitet.php, (3) prop_aktivitet.php, (4) kategorier.php, (5) konfig.php, (6) security.php, (7) manual.php, and possibly (8) index.php.  
Phase
Assigned (20090413)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
401204 36836 CVE-2008-6719 MILW0RM:7034  View
401205 36836 CVE-2008-6719 URL:http://www.milw0rm.com/exploits/7034  View
401206 36836 CVE-2008-6719 BID:32166  View
401207 36836 CVE-2008-6719 URL:http://www.securityfocus.com/bid/32166  View
401208 36836 CVE-2008-6719 XF:justlistit-multiple-authentication-bypass(46441)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44554 JVNDB-2009-005561 TurnkeyForms Entertainment Portal における認証を回避される脆弱性 TurnkeyForms Entertainment Portal には、認証を回避される、および管理アクセス権限を取得される脆弱性が存在します。 CVE-2008-6723 36836 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005561.html  View