CVE-2008-1327 Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is un...
HighCVSS 7.5
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gallarific | All versions | No fix listed |
References
- downloads.securityfocus.com exploit
- 29399 third-party-advisory vendor-advisory
- 28163 exploit vdb-entry
- gallarific-index-users-auth-bypass(41106) vdb-entry
- [struts-issues] 20201207 [jira] [Created] (WW-5105) Tracking the fix commit of CVE-2005-3745 and CVE-2018-1327 mailing-list
- [struts-issues] 20201207 [jira] [Updated] (WW-5105) Tracking the fix commit of CVE-2005-3745 and CVE-2018-1327 mailing-list