SendCard Login.PHP Browser Redirection Authentication Bypass Vulnerability
BID:19337
Info
SendCard Login.PHP Browser Redirection Authentication Bypass Vulnerability
| Bugtraq ID: | 19337 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 03 2006 12:00AM |
| Updated: | Aug 04 2006 05:06PM |
| Credit: | rgod is credited with the discovery of this vulnerability. |
| Vulnerable: |
Sendcard Sendcard 3.4 Sendcard Sendcard 3.3 Sendcard Sendcard 3.2.3 Sendcard Sendcard 3.2.2 Sendcard Sendcard 3.2.1 Sendcard Sendcard 3.2 |
| Not Vulnerable: | |
Discussion
SendCard Login.PHP Browser Redirection Authentication Bypass Vulnerability
SendCard is prone to an authentication-bypass vulnerability because the application fails to prevent an attacker from accessing admin scripts directly without requiring authentication.
A remote attacker can exploit this issue to perform administrative functions without requiring authentication. For example, the attacker may be able to create administrative users for the affected application.
SendCard is prone to an authentication-bypass vulnerability because the application fails to prevent an attacker from accessing admin scripts directly without requiring authentication.
A remote attacker can exploit this issue to perform administrative functions without requiring authentication. For example, the attacker may be able to create administrative users for the affected application.
Exploit / POC
SendCard Login.PHP Browser Redirection Authentication Bypass Vulnerability
Attackers can exploit this issue via a web client.
The following proof-of-concept code is available:
Attackers can exploit this issue via a web client.
The following proof-of-concept code is available:
Solution / Fix
SendCard Login.PHP Browser Redirection Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
SendCard Login.PHP Browser Redirection Authentication Bypass Vulnerability
References:
References: