CVE-2007-6414 admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication and obtain administrative credenti...
HighCVSS 7.5
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
admin/administrator.php in Adult Script 1.6 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication and obtain administrative credentials via a direct request. NOTE: this can be leveraged for arbitrary code execution through a request to admin/videolinks_view.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adultscript | = 1.6 | No fix listed |
References
- 28064 third-party-advisory vendor-advisory
- 26870 exploit vdb-entry
- adultscript-administrator-security-bypass(39034) vdb-entry
- 4731 exploit