GR Blog Multiple Administrative Scripts Authentication Bypass Vulnerabilities
BID:33629
Info
GR Blog Multiple Administrative Scripts Authentication Bypass Vulnerabilities
| Bugtraq ID: | 33629 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2009 12:00AM |
| Updated: | Feb 06 2009 08:48PM |
| Credit: | Jose Luis Gongora Fernandez |
| Vulnerable: |
SIRINI.NET GR Blog 1.1.4 |
| Not Vulnerable: | |
Discussion
GR Blog Multiple Administrative Scripts Authentication Bypass Vulnerabilities
GR Blog is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes, including uploading arbitrary files and adding, modifying, or deleting user data. This may lead to further attacks.
GR Blog 1.1.4 is vulnerable; other versions may also be affected.
GR Blog is prone to multiple authentication-bypass vulnerabilities because it fails to perform adequate authentication checks.
An attacker can exploit these issues to gain unauthorized access to the application and make arbitrary changes, including uploading arbitrary files and adding, modifying, or deleting user data. This may lead to further attacks.
GR Blog 1.1.4 is vulnerable; other versions may also be affected.
Exploit / POC
GR Blog Multiple Administrative Scripts Authentication Bypass Vulnerabilities
An attacker can use a browser to exploit these issues.
An attacker can use a browser to exploit these issues.
Solution / Fix
GR Blog Multiple Administrative Scripts Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
GR Blog Multiple Administrative Scripts Authentication Bypass Vulnerabilities
References:
References:
- GR Blog Homepage (SIRINI.NET)