PT-2005-4742 · Sapid · Sapid Cms

CVE-2005-4006

·

Publicado

2005-12-05

·

Atualizado

2024-02-14

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions SAPID CMS versions prior to 1.2.3.03
Description The issue allows remote attackers to bypass authentication by making direct requests to certain files, including insert file.php, insert image.php, insert link.php, insert qcfile.php, and edit.php. This could potentially lead to unauthorized access.
Recommendations For SAPID CMS versions prior to 1.2.3.03, update to version 1.2.3.03 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable files, such as insert file.php, insert image.php, insert link.php, insert qcfile.php, and edit.php, to minimize the risk of exploitation.

Correção

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2005-4006

Produtos afetados

Sapid Cms