XT-News Multiple Administrative Scripts Authentication Bypass Vulnerabilities
BID:28761
Info
XT-News Multiple Administrative Scripts Authentication Bypass Vulnerabilities
| Bugtraq ID: | 28761 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2008 12:00AM |
| Updated: | Apr 16 2008 12:30AM |
| Credit: | ZoRLu |
| Vulnerable: |
DreaXTeam Xt-News 0.1 |
| Not Vulnerable: | |
Discussion
XT-News Multiple Administrative Scripts Authentication Bypass Vulnerabilities
XT-News is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes to its configuration. This may lead to further attacks.
XT-News 0.1 is vulnerable; other versions may also be affected.
XT-News is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes to its configuration. This may lead to further attacks.
XT-News 0.1 is vulnerable; other versions may also be affected.
Exploit / POC
XT-News Multiple Administrative Scripts Authentication Bypass Vulnerabilities
An attacker can use a browser to exploit these issues.
An attacker can use a browser to exploit these issues.
Solution / Fix
XT-News Multiple Administrative Scripts Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
XT-News Multiple Administrative Scripts Authentication Bypass Vulnerabilities
References:
References:
- Xt-News Homepage (DreaXTeam)