PT-2006-3692 · Hogstorps · Hogstorps Hogstorp Guestbook

Publicado 2006-06-02 · Atualizado 2017-07-20 · CVE-2006-2773

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hogstorps hogstorp Guestbook version 2.0

Description The issue concerns the admin/redigera/redigera2.asp endpoint in Hogstorps hogstorp Guestbook, where it fails to verify user credentials. This allows remote attackers to edit arbitrary posts. The exact vectors used for the attack are not specified.

Recommendations For Hogstorps hogstorp Guestbook version 2.0, consider implementing proper user credential verification to prevent unauthorized access to the admin/redigera/redigera2.asp endpoint. As a temporary workaround, restrict access to this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-2773

Produtos afetados

Hogstorps Hogstorp Guestbook

Referências · 4

• 🔥 http://secunia.com/advisories/20402 · Exploit
• http://vupen.com/english/advisories/2006/2082 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2773 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26979 · Nota