PT-2005-4742 · Sapid · Sapid Cms

Published

2005-12-05

·

Updated

2024-02-14

·

CVE-2005-4006

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions SAPID CMS versions prior to 1.2.3.03
Description The issue allows remote attackers to bypass authentication by making direct requests to certain files, including insert file.php, insert image.php, insert link.php, insert qcfile.php, and edit.php. This could potentially lead to unauthorized access.
Recommendations For SAPID CMS versions prior to 1.2.3.03, update to version 1.2.3.03 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable files, such as insert file.php, insert image.php, insert link.php, insert qcfile.php, and edit.php, to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2005-4006

Affected Products

Sapid Cms