SpagoBI 4.0 Privilege Escalation

Advisory Information Title: Remote Privilege Escalation in SpagoBI Date published: 2013-02-28 Date of last update: 2013-02-28 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: High 02. Vulnerability Information CVE reference: CVE-2013-6231 CVSS v2 Base Score: 9...

SpagoBI 4.0 - Privilege Escalation

SpagoBI 4.0 - Privilege Escalation 01. Advisory Information Title: Remote Privilege Escalation in SpagoBI Date published: 2013-02-28 Date of last update: 2013-02-28 Vendors contacted: Engineering Group Discovered by: Christian Catalano Severity: High 02. Vulnerability Information CVE reference:...

CVE-2008-6231

CVE-2008-6231 describes a cookie-based authentication bypass in a PHP application, where remote attackers can gain administrative access by setting the cookies adminname and adminid to "admin". The available documents explicitly state the vulnerability is an authentication flaw allowing privilege...

CVE-2008-4428

creationtimestamp| type| source ---|---|--- 2008-08-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6215 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6231 2009-02-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8105...

CVE-2007-6231

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tmincludepath parameter to 1 Classes.inc.php, 2 statistic.inc.php, 3 status.inc.php, 4 statustopx.inc.php, or 5 libchart-1.1/libchart.php in include/. NOTE:...

CVE-2007-6231

Vulnerability: CVE-2007-6231 affects tellmatic 1.0.7 with multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code via a URL in tm_includepath for files under include/, including Classes.inc.php, statistic.inc.php, status.inc.php, status_top_x.inc.php, and lib...

CVE-2006-6231

CVE-2006-6231 affects vuBB 0.2.1 and earlier. A direct request to includes/vubb.php can cause an error message that leaks the server path, enabling information disclosure. The cited CVSS v2 base score is 5.0 (Medium) with network access and low attack complexity, and no integrity/availability imp...