MyGuestBK Unauthorized Admin Panel Access Vulnerability
BID:7213
Info
MyGuestBK Unauthorized Admin Panel Access Vulnerability
| Bugtraq ID: | 7213 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 27 2003 12:00AM |
| Updated: | Mar 27 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Over_G <[email protected]>. |
| Vulnerable: |
MyGuestBook MyGuestBK |
| Not Vulnerable: | |
Discussion
MyGuestBK Unauthorized Admin Panel Access Vulnerability
MyGuestBk has been reported vulnerable to unauthorized Admin Panel Access.
It has been reported that an attacker may access arbitrary MyGuestBK administrative functions through the MyGuestBK administration panel without prior authorization.
MyGuestBk has been reported vulnerable to unauthorized Admin Panel Access.
It has been reported that an attacker may access arbitrary MyGuestBK administrative functions through the MyGuestBK administration panel without prior authorization.
Exploit / POC
MyGuestBK Unauthorized Admin Panel Access Vulnerability
The following proof of concept was provided:
http://www.example.com/myguestBk/admin/index.asp
http://www.example.com/myguestBk/admin/delEnt.asp?id=NEWSNUMBER
The following proof of concept was provided:
http://www.example.com/myguestBk/admin/index.asp
http://www.example.com/myguestBk/admin/delEnt.asp?id=NEWSNUMBER
Solution / Fix
MyGuestBK Unauthorized Admin Panel Access Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MyGuestBK Unauthorized Admin Panel Access Vulnerability
References:
References:
- Vulnerability in my guest book ("Over_G"