Lucene search
MitreCVELIST:CVE-2018-20371HistoryDec 23, 2018 - 2:00 a.m.
CVE-2018-20371
2018-12-2302:00:00
mitre
www.cve.org
4
photorange photo vault
uri authorization
remote attackers
brute-force
PhotoRange Photo Vault 1.2 appends the password to the URI for authorization, which makes it easier for remote attackers to bypass intended GET restrictions via a brute-force approach, as demonstrated by “GET /login.html__passwd1” and “GET /login.html__passwd2” and so on.
Related
cve
cve
CVE-2018-20371
2018-12-23 02:29:00
nvd
nvd
CVE-2018-20371
2018-12-23 02:29:00
vulnerlab
vulnerlab
Photo Vault v1.2 iOS - Insecure Authentication Vulnerability
2018-01-16 00:00:00
Photo Vault 1.2 iOS - Insecure Authentication Vulnerability
2018-01-16 00:00:00
prion
prion
Default credentials
2018-12-23 02:29:00