Hogstorps Guestbook tabort.asp delID Arbitrary Unauthenticated Message Deletion

2006-05-04T08:05:10
ID OSVDB:25930
Type osvdb
Reporter OSVDB
Modified 2006-05-04T08:05:10

Description

Manual Testing Notes

http://[target]/[path_of_application]/admin/radera/tabort.asp?delID=119

References:

Vendor URL: http://www.hogstorp.nu/ Secunia Advisory ID:20402 Related OSVDB ID: 25931 Related OSVDB ID: 25932 Other Advisory URL: http://colander.altervista.org/advisory/HTGuestBook2.txt FrSIRT Advisory: ADV-2006-2082 CVE-2006-2771 Bugtraq ID: 18205