EQDKP Session.PHP Authorization Bypass Vulnerability
BID:14541
Info
EQDKP Session.PHP Authorization Bypass Vulnerability
| Bugtraq ID: | 14541 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 10 2005 12:00AM |
| Updated: | Aug 10 2005 12:00AM |
| Credit: | The vendor announced this vulnerability. |
| Vulnerable: |
EQdkp EQdkp 1.2 .0 EQdkp EQdkp 1.1 .0 |
| Not Vulnerable: |
EQdkp EQdkp 1.3 .0 |
Discussion
EQDKP Session.PHP Authorization Bypass Vulnerability
EQdkp is affected by an authorization bypass vulnerability.
EQdkp is affected by an authorization bypass vulnerability. A remote attacker may be able to exploit this vulnerability to bypass certain security restrictions.
The vendor has addressed this issue in EQdkp version 1.3.0; earlier versions are reportedly affected.
EQdkp is affected by an authorization bypass vulnerability.
EQdkp is affected by an authorization bypass vulnerability. A remote attacker may be able to exploit this vulnerability to bypass certain security restrictions.
The vendor has addressed this issue in EQdkp version 1.3.0; earlier versions are reportedly affected.
Exploit / POC
EQDKP Session.PHP Authorization Bypass Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
EQDKP Session.PHP Authorization Bypass Vulnerability
Solution:
The vendor has addressed this issue in EQdp version 1.3.0:
EQdkp EQdkp 1.1 .0
EQdkp EQdkp 1.2 .0
Solution:
The vendor has addressed this issue in EQdp version 1.3.0:
EQdkp EQdkp 1.1 .0
-
EQdkp eqdkp-1.3.0.tar.gz
http://eqdkp.com/download.php?file=eqdkp-1.3.0.tar.gz
EQdkp EQdkp 1.2 .0
-
EQdkp eqdkp-1.3.0.tar.gz
http://eqdkp.com/download.php?file=eqdkp-1.3.0.tar.gz
References
EQDKP Session.PHP Authorization Bypass Vulnerability
References:
References:
- EQdkp Changelog (EQdkp)
- EQdkp Homepage (EQdkp)