CVE Vulnerabilities

CVE-2005-1288

Published: May 02, 2005 | Modified: Oct 18, 2016
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

inc_login_check.asp ACS Blog 0.8 through 1.1.3 allows remote attackers to gain administrator privileges via the in value in a cookie.

Affected Software

Name Vendor Start Version End Version
Acs_blog Asp_press 0.8 (including) 0.8 (including)
Acs_blog Asp_press 0.9 (including) 0.9 (including)
Acs_blog Asp_press 1.0 (including) 1.0 (including)
Acs_blog Asp_press 1.0.1 (including) 1.0.1 (including)
Acs_blog Asp_press 1.0.2 (including) 1.0.2 (including)
Acs_blog Asp_press 1.0.3 (including) 1.0.3 (including)
Acs_blog Asp_press 1.1 (including) 1.1 (including)
Acs_blog Asp_press 1.1.1 (including) 1.1.1 (including)
Acs_blog Asp_press 1.1.2 (including) 1.1.2 (including)
Acs_blog Asp_press 1.1b (including) 1.1b (including)

References