Title: MP Form Mail CGI Unspecified Admin Access Restriction Bypass
Info
Disclosure
Mar 10, 2009
Discovery
Mar 10, 2009
Dates
Exploit
Unknown
Solution
Mar 10, 2009
Description
MP Form Mail CGI contains an unspecified flaw that may allow an attacker to bypass restrictions and gain admin access. No further details have been provided.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Solution:
Patch / RCS
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
OSVDB:
Web Related
Solution
Upgrade to Professional version 3.2.3 or eCommerce version 2.0.0 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.