Design/Logic Flaw

2009-05-2920:30:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.7%

JSON

modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action.

CPENameOperatorVersion
mycolexeq1.4.2

CPE	Name	Operator	Version
	mycolex	eq	1.4.2

References

www.collector.ch/drupal5/?q=node/39

www.vupen.com/english/advisories/2009/1344

www.exploit-db.com/exploits/8707