CVE

Id
54845  
CVE No.
CVE-2012-1602  
Status
Candidate  
Description
user.php in NextBBS 0.6 allows remote attackers to bypass authentication and gain administrator access by setting the userkey cookie to 1.  
Phase
Assigned (20120312)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
573932 54845 CVE-2012-1602 BUGTRAQ:20120327 [waraxe-2012-SA#080] - Multiple Vulnerabilities in NextBBS 0.6.0  View
573933 54845 CVE-2012-1602 URL:http://archives.neohapsis.com/archives/bugtraq/2012-03/0135.html  View
573934 54845 CVE-2012-1602 MLIST:[oss-security] 20120329 CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080  View
573935 54845 CVE-2012-1602 URL:http://www.openwall.com/lists/oss-security/2012/03/29/8  View
573936 54845 CVE-2012-1602 MLIST:[oss-security] 20120329 Re: CVE-request: NextBBS 0.6.0 waraxe-2012-SA#080  View
573937 54845 CVE-2012-1602 URL:http://www.openwall.com/lists/oss-security/2012/03/30/2  View
573938 54845 CVE-2012-1602 MISC:http://packetstormsecurity.org/files/111250/NextBBS-0.6.0-Authentication-Bypass-SQL-Injection-XSS.html  View
573939 54845 CVE-2012-1602 MISC:http://www.waraxe.us/advisory-80.html  View
573940 54845 CVE-2012-1602 BID:52728  View
573941 54845 CVE-2012-1602 URL:http://www.securityfocus.com/bid/52728  View
573942 54845 CVE-2012-1602 OSVDB:80626  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
28368 JVNDB-2012-004075 TYPO3 の Command Line Interface スクリプトにおけるデータベース名を取得される脆弱性 TYPO3 の Command Line Interface (CLI) スクリプトには、データベース名を取得される脆弱性が存在します。 CVE-2012-1607 54845 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004075.html  View