MG2 Authentication Bypass Vulnerability
BID:15235
Info
MG2 Authentication Bypass Vulnerability
| Bugtraq ID: | 15235 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 29 2005 12:00AM |
| Updated: | Oct 29 2005 12:00AM |
| Credit: | Discovery is credited to Preben Nylokken <[email protected]>. |
| Vulnerable: |
Thomas Rybak MiniGal B13 Thomas Rybak MG2 0.5.1 |
| Not Vulnerable: | |
Discussion
MG2 Authentication Bypass Vulnerability
MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries.
All versions of MG2 are considered to be vulnerable at the moment. Minigal B13 is likely affected as well.
MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries.
All versions of MG2 are considered to be vulnerable at the moment. Minigal B13 is likely affected as well.
Exploit / POC
MG2 Authentication Bypass Vulnerability
An exploit is not required.
The following proof of concept is available:
http://www.exmaple.com/mg2/index.php?list=*&page=all
An exploit is not required.
The following proof of concept is available:
http://www.exmaple.com/mg2/index.php?list=*&page=all
Solution / Fix
MG2 Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MG2 Authentication Bypass Vulnerability
References:
References: