5 matches found
CVE-2004-2144
Baal Smart Forms pre-3.2 allows remote attackers to bypass authentication and gain system access via a direct request to regadmin.php. The issue is documented across multiple sources (CVE listing and PT Security advisory) and affects versions prior to 3.2. Remediation recommended: upgrade to Baal...
CVE-2004-2144
Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php...
CVE-2004-2144
Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php...
PT-2004-3039 · Baal · Baal Smart Forms
Name of the Vulnerable Software and Affected Versions: Baal Smart Forms versions prior to 3.2 Description: The issue allows remote attackers to bypass authentication and obtain system access via a direct request to "regadmin.php". Recommendations: For versions prior to 3.2, update to version 3.2 ...
[SA12649] Baal Smart Forms "Admin Change Password" Security Bypass
TITLE: Baal Smart Forms "Admin Change Password" Security Bypass SECUNIA ADVISORY ID: SA12649 VERIFY ADVISORY: http://secunia.com/advisories/12649/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Baal Smart Forms 3.x http://secunia.com/product/3949/ DESCRIPTION: ...