0DayDB 'delete.php' Authentication Bypass Vulnerability
BID:27255
Info
0DayDB 'delete.php' Authentication Bypass Vulnerability
| Bugtraq ID: | 27255 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2008 12:00AM |
| Updated: | Jan 14 2008 07:19PM |
| Credit: | Pr0metheuS is credited with the discovery of this vulnerability. |
| Vulnerable: |
d0xScripts 0DayDB 2.3 |
| Not Vulnerable: | |
Discussion
0DayDB 'delete.php' Authentication Bypass Vulnerability
0DayDB is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to perform certain administrative actions. A successful attack will affect the integrity of the application; other attacks are also possible.
This issue affects 0DayDB 2.3; other versions may also be vulnerable.
0DayDB is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to perform certain administrative actions. A successful attack will affect the integrity of the application; other attacks are also possible.
This issue affects 0DayDB 2.3; other versions may also be vulnerable.
Exploit / POC
0DayDB 'delete.php' Authentication Bypass Vulnerability
Attackers can exploit this issue via a browser.
The following exploit for deleting arbitrary database entries is available:
Attackers can exploit this issue via a browser.
The following exploit for deleting arbitrary database entries is available:
Solution / Fix
0DayDB 'delete.php' Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
0DayDB 'delete.php' Authentication Bypass Vulnerability
References:
References:
- 0DayDB Product Page (d0xScripts)