vendor:
Host Directory PRO
by:
SecurityFocus
7.5
CVSS
HIGH
Security-Bypass
287
CWE
Product Name: Host Directory PRO
Affected Version From: Host Directory PRO
Affected Version To: Host Directory PRO
Patch Exists: No
Related CWE: N/A
CPE: a:host_directory_pro:host_directory_pro
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Host Directory PRO Security-Bypass Vulnerability
Host Directory PRO fails to properly validate user credentials before performing certain actions, allowing an attacker to bypass certain security restrictions and gain administrative access to the application. This can be done by setting a cookie with the value 'adm=1 path=/'.
Mitigation:
Validate user credentials before performing certain actions.