Mortiforo Unauthorized Access Vulnerability
BID:13887
Info
Mortiforo Unauthorized Access Vulnerability
| Bugtraq ID: | 13887 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 07 2005 12:00AM |
| Updated: | Jun 07 2005 12:00AM |
| Credit: | The vendor announced this issue. |
| Vulnerable: |
Mortiforo Mortiforo 0.9 |
| Not Vulnerable: |
Mortiforo Mortiforo 0.9.1 |
Discussion
Mortiforo Unauthorized Access Vulnerability
Mortiforo is affected by an unauthorized access vulnerability.
A remote attacker can access private forums without providing proper authentication credentials.
Mortiforo 0.9 is affected by this issue.
Mortiforo is affected by an unauthorized access vulnerability.
A remote attacker can access private forums without providing proper authentication credentials.
Mortiforo 0.9 is affected by this issue.
Exploit / POC
Mortiforo Unauthorized Access Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Mortiforo Unauthorized Access Vulnerability
Solution:
The vendor has released version 0.9.1 to address this issue.
Mortiforo Mortiforo 0.9
Solution:
The vendor has released version 0.9.1 to address this issue.
Mortiforo Mortiforo 0.9
-
Mortíforo mortiforo-0.9.1.tar.gz
http://prdownloads.sourceforge.net/mortiforo/mortiforo-0.9.1.tar.gz?do wnload
References
Mortiforo Unauthorized Access Vulnerability
References:
References:
- Home Page (Mortiforo)
- Mortiforo Access Control Flaw Lets Remote Users Access Private Forums (SecurityTracker)