Almond Classifieds Unauthorized Access Vulnerability
BID:15505
Info
Almond Classifieds Unauthorized Access Vulnerability
| Bugtraq ID: | 15505 |
| Class: | Access Validation Error |
| CVE: |
CVE-2005-3741 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 21 2005 12:00AM |
| Updated: | Jul 02 2008 07:00PM |
| Credit: | Alexiev <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
AlmondSoft Almond Classifieds 0 |
| Not Vulnerable: | |
Discussion
Almond Classifieds Unauthorized Access Vulnerability
Almond Classifieds is prone to an unauthorized access vulnerability because the application fails to verify the password supplied matches the given entry.
Successful exploits will overwrite arbitrary entries with attacker-supplied data.
Almond Classifieds is prone to an unauthorized access vulnerability because the application fails to verify the password supplied matches the given entry.
Successful exploits will overwrite arbitrary entries with attacker-supplied data.
Exploit / POC
Almond Classifieds Unauthorized Access Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Almond Classifieds Unauthorized Access Vulnerability
Solution:
Vendor updates are available. Please contact the vendor for details.
Solution:
Vendor updates are available. Please contact the vendor for details.
References
Almond Classifieds Unauthorized Access Vulnerability
References:
References:
- Almond Classifieds Homepage (AlmondSoft.Com)