NVD

Id
67648  
Name
CVE-2005-1932  
Description
Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, (2) close, open, or respond to arbitrary support tickets via the close, open, or pid parameter to view_ticket.php, (3) obtain sensitive information on arbitrary invoices via the inv parameter to viewreceipt.php, or (4) modify domain information for arbitrary domains via the editdomain parameter to domains.php.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-07-05  
Modified Date
2008-09-05  
Seq
2005-1932  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350122 67648 CVE-2005-1932 20050606 Lpanel.NET"s Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to close any support ticket within the system.  View
350123 67648 CVE-2005-1932 20050606 Lpanel.NET"s Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to open any support ticket within the system.  View
350124 67648 CVE-2005-1932 20050606 Lpanel.NET"s Lpanel (all versions up to and including 1.59) is vulnerable to unauthorized domain management access.  View
350125 67648 CVE-2005-1932 20050606 Lpanel.NET"s Lpanel (all versions up to and including 1.59) is vulnerable to the unauthorized viewing of client invoice information.  View
350126 67648 CVE-2005-1932 20050606 Lpanel.NET"s Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to respond to any support ticket on the system.  View
350127 67648 CVE-2005-1932 20050606 Lpanel.NET"s Lpanel (all versions up to and including 1.59) is vulnerable in that it allows an attacker to reset the DNS information of any domain name managed by the system.  View
350128 67648 CVE-2005-1932 http://www.lpanel.net/changelog.php  View
350129 67648 CVE-2005-1932 13869  View

Related JVN