Digi-FX Multiple Product Authentication Logic Vulnerability
BID:8213
Info
Digi-FX Multiple Product Authentication Logic Vulnerability
| Bugtraq ID: | 8213 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 16 2003 12:00AM |
| Updated: | Jul 16 2003 12:00AM |
| Credit: | Reported by "scrap" <[email protected]>. |
| Vulnerable: |
Digi-FX Digi-News 1.1 Digi-FX Digi-Ads 1.1 |
| Not Vulnerable: | |
Exploit / POC
Digi-FX Multiple Product Authentication Logic Vulnerability
This vulnerability can be exploited with a Web browser.
This vulnerability can be exploited with a Web browser.
Solution / Fix
Digi-FX Multiple Product Authentication Logic Vulnerability
Solution:
The vendor has released version Digi-Ads version 1.2 and Digi-News version 1.2 to correct this issue.
Digi-FX Digi-Ads 1.1
Digi-FX Digi-News 1.1
Solution:
The vendor has released version Digi-Ads version 1.2 and Digi-News version 1.2 to correct this issue.
Digi-FX Digi-Ads 1.1
-
digi-FX digi-ads1.2.zip
http://www.digi-fx.net/freebies/digi-ads1.2.zip
Digi-FX Digi-News 1.1
-
digi-FX digi-news1.2.zip
http://www.digi-fx.net/freebies/digi-news1.2.zip
References
Digi-FX Multiple Product Authentication Logic Vulnerability
References:
References:
- Free Scripts (digi-FX)
- Digi-news and Digi-ads version 1.1 admin access without password (scrap
)