dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Dnstools | Dnstools_software | 2.0_beta3 (including) | 2.0_beta3 (including) |
Dnstools | Dnstools_software | 2.0_beta4 (including) | 2.0_beta4 (including) |