CVE

Id
36856  
CVE No.
CVE-2008-6739  
Status
Candidate  
Description
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request.  
Phase
Assigned (20090421)  
Votes
None (candidate not yet proposed)  
Comments