Authentication flaw

2007-03-1621:19:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.039 Low

EPSS

Percentile

92.1%

JSON

admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp.

CPENameOperatorVersion
orion-blogeq2.0

CPE	Name	Operator	Version
	orion-blog	eq	2.0

References

osvdb.org/35039

securityreason.com/securityalert/2440

www.securityfocus.com/archive/1/462920/100/0/threaded