CVE-2018-19754

Tarantella Enterprise before 3.11 allows bypassing Access Control...

CVE-2018-19754

CVE-2018-19754 - Tarantella Enterprise prior to 3.11 contains an access-control bypass vulnerability. The issue allows an attacker to gain access to another user’s account by modifying a parameter in a login request, effectively bypassing authentication via the Web management/login flow. Document...

Tarantella Enterprise Security Bypass Vulnerability

Exploit for cgi platform in category web applications &ms=unique Where the parameter un is the username you know. You recive the message: "The content of this file must be language independent! This applet immediately loads a new document in a named frame here WebtopFrame, which will be so...