CVE-2008-6739 Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request.
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| toddwoolums asp download | = 1.03 | No fix listed |
References
- adm-setupdownload-security-bypass(42983) vdb-entry
- 5780 exploit