PHPads 'admin.php' Authentication Bypass Vulnerability
BID:71534
Info
PHPads 'admin.php' Authentication Bypass Vulnerability
| Bugtraq ID: | 71534 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2014 12:00AM |
| Updated: | Dec 15 2014 12:00AM |
| Credit: | Shaker msallm |
| Vulnerable: |
Blondish Rockstar PHPads 213607 |
| Not Vulnerable: | |
Discussion
PHPads 'admin.php' Authentication Bypass Vulnerability
PHPads is prone to an authentication-bypass vulnerability because it fails to properly validate the authentication mechanism.
Attackers can exploit this vulnerability to gain administrative access to the affected application or to change the administrator password.
PHPads 213607 and prior versions are vulnerable.
PHPads is prone to an authentication-bypass vulnerability because it fails to properly validate the authentication mechanism.
Attackers can exploit this vulnerability to gain administrative access to the affected application or to change the administrator password.
PHPads 213607 and prior versions are vulnerable.
Exploit / POC
PHPads 'admin.php' Authentication Bypass Vulnerability
Attackers can exploit this issue with a browser.
Attackers can exploit this issue with a browser.
Solution / Fix
PHPads 'admin.php' Authentication Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]