Prozilla Top Sites Multiple Security Bypass Vulnerabilities

Bugtraq ID:	28641
Class:	Access Validation Error
CVE:	CVE-2008-1784
Remote:	Yes
Local:	No
Published:	Apr 06 2008 12:00AM
Updated:	May 07 2015 05:30PM
Credit:	t0pP8uZz
Vulnerable:	ProZIlla Top Sites 1.0
Not Vulnerable:

Prozilla Top Sites Multiple Security Bypass Vulnerabilities

Prozilla Top Sites is prone to multiple security-bypass vulnerabilities because it fails to properly validate user credentials before performing certain actions.

Successful exploits will allow attackers to bypass certain security restrictions and gain unauthorized access to administrative functionality. This in turn may lead to a compromise of the affected application.

These issues affect Prozilla Top Sites 1.0; other versions may also be vulnerable.

Prozilla Top Sites Multiple Security Bypass Vulnerabilities

An attacker can exploit these issues through a browser.

Prozilla Top Sites Multiple Security Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Prozilla Top Sites Multiple Security Bypass Vulnerabilities

References:

• Prozilla Homepage (Prozilla)
  
• Prozilla Top Sites Homepage (Prozilla)