PT-2000-1376 · Allmanage · Allmanage Website Administration

Publicado 2000-05-13 · Atualizado 2008-09-10 · CVE-2000-0435

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Allmanage Website administration software version 2.6

Description The issue allows remote attackers to modify user accounts or web pages by directly calling the allmanageup.pl file upload CGI script.

Recommendations For Allmanage Website administration software version 2.6, restrict access to the allmanageup.pl file upload CGI script to prevent direct calls from remote attackers.

Correção

Identificadores relacionados

CVE-2000-0435

Produtos afetados

Allmanage Website Administration

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0435 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html · Nota
• http://securityfocus.com/bid/1217 · Nota
• http://osvdb.org/1337 · Nota