Lucene search
HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0915
cve-2005-0915
webmasters-debutants
wd guestbook 2.8
authentication bypass
remote attackers
http post request
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.0%
Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to (1) ajout_admin2.php or (2) suppr.php.
Affected configurations
Node
webmasters-debutantswd_guestbookMatch2.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| webmasters-debutants:wd_guestbook | webmasters-debutants wd guestbook | eq | 2.8 |
References
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.0%
Related for CVE-2005-0915