Lucene search
PRIOn knowledge basePRION:CVE-2008-6673HistoryApr 08, 2009 - 10:30 a.m.
Design/Logic Flaw
2009-04-0810:30:00
PRIOn knowledge base
www.prio-n.com
4
asp/bs_login.asp in QuickerSite 1.8.5 does not properly restrict access to administrative functionality, which allows remote attackers to (1) change the admin password via the cSaveAdminPW action; (2) modify site information, such as the contact address, via the saveAdmin; and (3) modify the site design via the saveDesign action.
| CPE | Name | Operator | Version |
|---|---|---|---|
| quickersite | eq | 1.8.5 |
Related
cve
cve
CVE-2008-6673
2009-04-08 10:30:00
nvd
nvd
CVE-2008-6673
2009-04-08 10:30:00
cvelist
cvelist
CVE-2008-6673
2009-04-08 10:00:00