PT-2002-2606 · Unknown · Py-Membres

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1884

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Py-Membres version 3.1

Description The issue allows remote attackers to log in as an administrator by manipulating the pymembs parameter. Specifically, setting the pymembs parameter to "admin" enables unauthorized access.

Recommendations For Py-Membres version 3.1, consider temporarily restricting access to the index.php file until a patch is available. As a workaround, avoid using the pymembs parameter or restrict its value to prevent unauthorized administrator login. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-1884

Affected Products

Py-Membres

References · 5

• 🔥 http://securityfocus.com/bid/5849 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html · Exploit
• 🔥 https://exploit-db.com/exploits/21886 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1884 · Security Note
• http://iss.net/security_center/static/10308.php · Note