2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
BID:27814
Info
2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
| Bugtraq ID: | 27814 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-0843 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2008 12:00AM |
| Updated: | May 07 2015 05:32PM |
| Credit: | SekoMirza is credited with the discovery of this issue. |
| Vulnerable: |
2eNetWorx StatCounteX 3.1 2eNetWorx StatCounteX 3.0 |
| Not Vulnerable: | |
Discussion
2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
StatCounteX is prone to a vulnerability that results in unauthorized administrative access. The application fails to authenticate users when certain pages are accessed.
Attackers can leverage this issue to compromise the application, which could aid in other attacks.
StatCounteX 3.0 and 3.1 are vulnerable; other versions may also be affected.
StatCounteX is prone to a vulnerability that results in unauthorized administrative access. The application fails to authenticate users when certain pages are accessed.
Attackers can leverage this issue to compromise the application, which could aid in other attacks.
StatCounteX 3.0 and 3.1 are vulnerable; other versions may also be affected.
Exploit / POC
2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
References:
References: