SLAED CMS 4 - Installation Script Unauthorized Access



EKU-ID: 38497 CVE: OSVDB-ID:
Author: indoushka Published: 2010-02-27 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/38453/info

SLAED CMS is prone to an unauthorized-access vulnerability.

Attackers can exploit this issue to obtain unauthorized access to installation scripts.

SLAED CMS 4 is vulnerable; other versions may also be affected.

The following example URIs are available:

http://www.example.com/sd/setup.php?op=language&lang=1

http://www.example.com/sd/install/index.php?op=language&lang=1