PT-2000-1376 · Allmanage · Allmanage Website Administration

Published 2000-05-13 · Updated 2008-09-10 · CVE-2000-0435

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Allmanage Website administration software version 2.6

Description The issue allows remote attackers to modify user accounts or web pages by directly calling the allmanageup.pl file upload CGI script.

Recommendations For Allmanage Website administration software version 2.6, restrict access to the allmanageup.pl file upload CGI script to prevent direct calls from remote attackers.

Fix

Related Identifiers

CVE-2000-0435

Affected Products

Allmanage Website Administration

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2000-0435 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2000-05/0167.html · Note
• http://securityfocus.com/bid/1217 · Note
• http://osvdb.org/1337 · Note