CVE-2007-1389 dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for (1) validlien.php3 (2) supprlien.php3 (3) supprub.php3 (4) validl...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for (1) validlien.php3 (2) supprlien.php3 (3) supprub.php3 (4) validlien.php3 (5) confsuppr.php3 (6) modiflien.php3, or (7) confmodif.php3 in admin/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dynaliens | = 2.0 | No fix listed |
| dynaliens | = 2.1 | No fix listed |
References
- forums.avenir-geopolitique.net exploit
- 2403 third-party-advisory
- 20070308 dynaliens v2.0/v2.1 bypass admin authentification + XSS mailing-list
- 22873 vdb-entry