WebPA Multiple Security Vulnerabilities
BID:55201
Info
WebPA Multiple Security Vulnerabilities
| Bugtraq ID: | 55201 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 23 2012 12:00AM |
| Updated: | Aug 23 2012 12:00AM |
| Credit: | dun |
| Vulnerable: |
Loughborough University WebPA 1.1.0.1 |
| Not Vulnerable: | |
Discussion
WebPA Multiple Security Vulnerabilities
WebPA is prone to multiple security vulnerabilities, including:
1. An arbitrary file-upload vulnerability
2. A security-bypass vulnerability
Exploiting these vulnerabilities may allow an attacker to bypass certain security restrictions to perform authorized actions and to upload and execute arbitrary files.
WebPA 1.1.0.1 and prior are vulnerable.
WebPA is prone to multiple security vulnerabilities, including:
1. An arbitrary file-upload vulnerability
2. A security-bypass vulnerability
Exploiting these vulnerabilities may allow an attacker to bypass certain security restrictions to perform authorized actions and to upload and execute arbitrary files.
WebPA 1.1.0.1 and prior are vulnerable.
Exploit / POC
WebPA Multiple Security Vulnerabilities
An attacker can exploit these issues using a browser.
The following exploit code is available:
An attacker can exploit these issues using a browser.
The following exploit code is available:
Solution / Fix
WebPA Multiple Security Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].