PT-2005-1363 · Webseries · Webseries Payment Application

Paul J Docherty · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0285

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Webseries Payment Application (affected versions not specified)

Description The issue concerns the Webseries Payment Application, which fails to properly restrict privileged operations. This allows remote authenticated users to gain privileges by directly accessing certain URLs, such as "/admin/dashboard" or "/users/{id}", potentially exploiting vulnerable parameters like username or user id.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-0285

Produtos afetados

Webseries Payment Application

Referências · 6

• 🔥 http://securityfocus.com/bid/12216 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0285 · Nota de Segurança
• http://securitytracker.com/id?1012854 · Nota
• http://secunia.com/advisories/13821 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18848 · Nota
• http://marc.info/?l=bugtraq&m=110547396124885&w=2 · Nota