PT-2006-1987 · Archangel · Archangel Weblog

Dj7Xpl · Publicado 2006-03-01 · Atualizado 2018-10-18 · CVE-2006-0944

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Archangel Weblog version 0.90.02

Description The issue allows remote attackers to bypass authentication. This is achieved by setting the ba admin cookie to 1, which enables unauthorized access.

Recommendations For Archangel Weblog version 0.90.02, consider disabling the use of the ba admin cookie until a patch is available to prevent unauthorized access. Restrict access to sensitive areas of the weblog to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-0944

Produtos afetados

Archangel Weblog

Referências · 8

• 🔥 https://exploit-db.com/exploits/27324 · Exploit
• 🔥 https://exploit-db.com/exploits/3859 · Exploit
• http://securitytracker.com/id?1015689 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0944 · Nota de Segurança
• http://osvdb.org/23620 · Nota
• http://securityfocus.com/bid/16848 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24984 · Nota
• http://securityfocus.com/archive/1/426184/100/0/threaded · Nota