OSVDB ID: 26623 Title: TWiki Registration Crafted form Element Account Hijack |
Info |
|
|
Dates |
||||
|
|
Description |
TWiki contains a flaw that may allow a malicious user to gain administrator privileges. The issue is caused due to an error in the registration process that can be exploited by changing the action attribute of the form element to the Sandbox web. It is possible that the flaw may allow a user to gain privileges of another user resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Confidentiality Exploit: Exploit Public OSVDB: Web Related |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, TWiki has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|