Help Center Live Administration Multiple Security Bypass Vulnerabilities

Bugtraq ID:	25225
Class:	Access Validation Error
CVE:	CVE-2007-4240
Remote:	Yes
Local:	No
Published:	Aug 07 2007 12:00AM
Updated:	May 07 2015 05:36PM
Credit:	Stephan Munz is credited with discovering these issues.
Vulnerable:	Help Center Live Help Center Live 2.1.3a
Not Vulnerable:

Help Center Live Administration Multiple Security Bypass Vulnerabilities

Help Center Live is prone to multiple security-bypass vulnerabilities because the application fails to properly restrict administrative pages from unprivileged users.

Successful exploits will allow attackers to gain access to administrative functionality and compromise a vulnerable application.

Help Center Live 2.1.3a is reported vulnerable; other versions may also be affected.

Help Center Live Administration Multiple Security Bypass Vulnerabilities

Attackers can use a browser to exploit these issues.

Help Center Live Administration Multiple Security Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Help Center Live Administration Multiple Security Bypass Vulnerabilities

References:

• Help Center Live Home Page (Help Center Live)