PT-2005-5318 · Al · Al-Caricatier

Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4653

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AL-Caricatier versions 2.5 and earlier

Description The issue allows remote attackers to bypass login authentication. This can be achieved by requesting view caricatier.php, and then requesting any file in the admin directory with a cookie username=admin argument.

Recommendations For versions 2.5 and earlier, as a temporary workaround, consider restricting access to the admin directory to minimize the risk of exploitation. Avoid using the cookie username argument in requests to files within the admin directory until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-4653

Affected Products

Al-Caricatier

References · 6

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0483.html · Exploit
• http://secunia.com/advisories/17292 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4653 · Security Note
• http://securityfocus.com/bid/15162 · Note
• http://vupen.com/english/advisories/2005/2181 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22840 · Note