AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/21787 | vdb entry |
https://exchange.xforce.ibmcloud.com/vulnerabilities/31123 | vdb entry |
http://www.securityfocus.com/archive/1/455352/100/0/threaded | mailing list |