Description (CNA)
TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/25358
- https://www.exploit-db.com/exploits/3963
- http://www.wavelinkmedia.com/scripts/tutorialcms/
- http://osvdb.org/36520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34401
- http://www.vupen.com/english/advisories/2007/1903
ADP enrichment
No English description supplied.