header-logo
Suggest Exploit
vendor:
Host Directory PRO
by:
SecurityFocus
7.5
CVSS
HIGH
Security-Bypass
287
CWE
Product Name: Host Directory PRO
Affected Version From: Host Directory PRO
Affected Version To: Host Directory PRO
Patch Exists: No
Related CWE: N/A
CPE: a:host_directory_pro:host_directory_pro
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

Host Directory PRO Security-Bypass Vulnerability

Host Directory PRO fails to properly validate user credentials before performing certain actions, allowing an attacker to bypass certain security restrictions and gain administrative access to the application. This can be done by setting a cookie with the value 'adm=1 path=/'.

Mitigation:

Validate user credentials before performing certain actions.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/28863/info

Host Directory PRO is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions.

Exploiting this issue may allow an attacker to bypass certain security restrictions and gain administrative access to the application. This will compromise the application and may aid in further attacks.

javascript:document.cookie = "adm=1 path=/;";