PT-2004-1415 · Unknown · Openjournal

Tri Huynh · Publicado 2004-09-01 · Atualizado 2018-05-03 · CVE-2004-0261

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenJournal versions 2.0 through 2.0.5

Description The issue allows remote attackers to bypass authentication and access the control panel. This is achieved by setting a 0 in the uid parameter in the oj.cgi endpoint.

Recommendations For OpenJournal versions 2.0 through 2.0.5, as a temporary workaround, consider restricting access to the oj.cgi endpoint until a patch is available. Avoid using the uid parameter with a value of 0 in the affected endpoint.

Exploit

Correção

Identificadores relacionados

CVE-2004-0261

Produtos afetados

Openjournal

Referências · 7

• 🔥 https://exploit-db.com/exploits/23659 · Exploit
• 🔥 http://securityfocus.com/bid/9598 · Exploit
• http://marc.info/?l=bugtraq&m=107619136600713&w=2 · Nota
• http://osvdb.org/3872 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0261 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15069 · Nota
• http://grohol.com/downloads/oj/latest/changelog.txt · Nota