Multiple SkyPortal Modules Multiple Authentication Bypass Vulnerabilities

Bugtraq ID:	33911
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 25 2009 12:00AM
Updated:	Feb 26 2009 12:57AM
Credit:	ByALBAYX
Vulnerable:	SkyPortal WebLinks 0.12 SkyPortal Picture Manager 0.11 SkyPortal Classifieds System 0.12
Not Vulnerable:

Multiple SkyPortal Modules Multiple Authentication Bypass Vulnerabilities

Multiple SkyPortal modules are prone to multiple authentication-bypass vulnerabilities because the applications fails to restrict access to certain administration scripts.

An attacker can exploit these issues to gain unauthorized access to the affected applications, which may lead to other attacks.

The following products and versions are affected:

SkyPortal Classifieds System 0.12
SkyPortal Picture Manager 0.11
SkyPortal WebLinks v0.12

Multiple SkyPortal Modules Multiple Authentication Bypass Vulnerabilities

Attackers may exploit these issues via a browser.

Multiple SkyPortal Modules Multiple Authentication Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple SkyPortal Modules Multiple Authentication Bypass Vulnerabilities

References:

• Vendor Homepage (SkyPortal)