EJ3 Topo Index.PHP Unauthorized Access Vulnerability

Bugtraq ID:	18959
Class:	Access Validation Error
CVE:	CVE-2006-3834
Remote:	Yes
Local:	No
Published:	Jul 12 2006 12:00AM
Updated:	Jul 05 2016 09:22PM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	EJ3 TOPo 2.2.178
Not Vulnerable:

EJ3 Topo Index.PHP Unauthorized Access Vulnerability

EJ3 Topo is prone to a unauthorized-access vulnerability. This issue occurs because the application fails to sanitize user input and discloses information about the original password.

An attacker can exploit this issue to override original data entries, override passwords, and gain unauthorized access to the application. This may lead to further attacks.

Version 2.2.178 is vulnerable to this issue; previous versions may also be affected.

EJ3 Topo Index.PHP Unauthorized Access Vulnerability

Attackers can exploit this issue through a web-client.

EJ3 Topo Index.PHP Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EJ3 Topo Index.PHP Unauthorized Access Vulnerability

References:

• EJ3 Topo Home Page (EJ3 Soft)
  
• TOPo v.2.2.178 Account Reset ([email protected])