OSVDB ID: 43081

Title: zKup CMS admin/configuration/modifier.php Direct Request Authentication Bypass

Info

Disclosure

Mar 07, 2008

Discovery

Unknown

Dates

Exploit

Mar 07, 2008

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2008-7124 (see also: NVD)
Bugtraq ID: 28149
Secunia Advisory ID: 29276
ISS X-Force ID: 41068
Related OSVDB ID: 43082
Exploit Database: 5219 5220
Milw0rm: 5219 5220
Vendor Specific News/Changelog Entry: http://www.zkup.fr/actualite-zkup/maj-critique-v203v204.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/43081