PT-2006-3692 · Hogstorps · Hogstorps Hogstorp Guestbook

Published 2006-06-02 · Updated 2017-07-20 · CVE-2006-2773

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hogstorps hogstorp Guestbook version 2.0

Description The issue concerns the admin/redigera/redigera2.asp endpoint in Hogstorps hogstorp Guestbook, where it fails to verify user credentials. This allows remote attackers to edit arbitrary posts. The exact vectors used for the attack are not specified.

Recommendations For Hogstorps hogstorp Guestbook version 2.0, consider implementing proper user credential verification to prevent unauthorized access to the admin/redigera/redigera2.asp endpoint. As a temporary workaround, restrict access to this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-2773

Affected Products

Hogstorps Hogstorp Guestbook

References · 4

• 🔥 http://secunia.com/advisories/20402 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2773 · Security Note
• http://vupen.com/english/advisories/2006/2082 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26979 · Note