GotoCode Online Classifieds 'MyInfo.aspx' Password Reset Security Bypass Vulnerability
BID:50040
Info
GotoCode Online Classifieds 'MyInfo.aspx' Password Reset Security Bypass Vulnerability
| Bugtraq ID: | 50040 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 10 2011 12:00AM |
| Updated: | Oct 10 2011 12:00AM |
| Credit: | Nathaniel Carew |
| Vulnerable: |
GotoCode Online Classifieds 0 |
| Not Vulnerable: | |
Discussion
GotoCode Online Classifieds 'MyInfo.aspx' Password Reset Security Bypass Vulnerability
GotoCode Online Classifieds is prone to a security-bypass vulnerability.
An attacker can exploit this issue to gain administrative access to the application, which may allow the attacker to compromise the application; other attacks are also possible.
GotoCode Online Classifieds is prone to a security-bypass vulnerability.
An attacker can exploit this issue to gain administrative access to the application, which may allow the attacker to compromise the application; other attacks are also possible.
References
GotoCode Online Classifieds 'MyInfo.aspx' Password Reset Security Bypass Vulnerability
References:
References:
- GotoCode Homepage (GotoCode)