PT-2002-2606 · Unknown · Py-Membres

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1884

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Py-Membres version 3.1

Description The issue allows remote attackers to log in as an administrator by manipulating the pymembs parameter. Specifically, setting the pymembs parameter to "admin" enables unauthorized access.

Recommendations For Py-Membres version 3.1, consider temporarily restricting access to the index.php file until a patch is available. As a workaround, avoid using the pymembs parameter or restrict its value to prevent unauthorized administrator login. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-1884

Produtos afetados

Py-Membres

Referências · 5

• 🔥 http://securityfocus.com/bid/5849 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html · Exploit
• 🔥 https://exploit-db.com/exploits/21886 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1884 · Nota de Segurança
• http://iss.net/security_center/static/10308.php · Nota