OSVDB ID: 52527

Title: MP Form Mail CGI Unspecified Admin Access Restriction Bypass

Info

Disclosure

Mar 10, 2009

Discovery

Mar 10, 2009

Dates

Exploit

Unknown

Solution

Mar 10, 2009

Description

MP Form Mail CGI contains an unspecified flaw that may allow an attacker to bypass restrictions and gain admin access. No further details have been provided.

Classification

Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to Professional version 3.2.3 or eCommerce version 2.0.0 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

futomi

MP Form Mail CGI

eCommerce 1.3.0
Professional 3.2.2

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/52527