PHPSiteStats Unspecified Authentication Bypass Vulnerability
BID:14493
Info
PHPSiteStats Unspecified Authentication Bypass Vulnerability
| Bugtraq ID: | 14493 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 08 2005 12:00AM |
| Updated: | Aug 08 2005 12:00AM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
PHPSiteStats PHPSiteStats 1.0 |
| Not Vulnerable: |
PHPSiteStats PHPSiteStats 1.1 |
Discussion
PHPSiteStats Unspecified Authentication Bypass Vulnerability
PHPSiteStats is prone to an unspecified authentication bypass vulnerability.
A successful attack can allow unauthorized attackers to bypass the authentication routines and gain access to the application. An attacker may then carry out other attacks against the vulnerable computer.
PHPSiteStats 1.0 is prone to this issue. Other versions may be vulnerable as well.
PHPSiteStats is prone to an unspecified authentication bypass vulnerability.
A successful attack can allow unauthorized attackers to bypass the authentication routines and gain access to the application. An attacker may then carry out other attacks against the vulnerable computer.
PHPSiteStats 1.0 is prone to this issue. Other versions may be vulnerable as well.
Exploit / POC
PHPSiteStats Unspecified Authentication Bypass Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
PHPSiteStats Unspecified Authentication Bypass Vulnerability
Solution:
The vendor has released PHPSiteStats 1.1 to address this issue.
PHPSiteStats PHPSiteStats 1.0
Solution:
The vendor has released PHPSiteStats 1.1 to address this issue.
PHPSiteStats PHPSiteStats 1.0
-
PHPSiteStats phpsitestats1.1.zip
http://prdownloads.sourceforge.net/phpsitestats/phpsitestats1.1.zip?do wnload
References
PHPSiteStats Unspecified Authentication Bypass Vulnerability
References:
References:
- Home Page (PHPSiteStats)
- Release Name: 1.1 (PHPSiteStats)