[eVuln] Magic Downloads Unauthorized Data Modification Feb 21 2006 04:49PM
alex evuln com
New eVuln Advisory:
Magic Downloads Unauthorized Data Modification

eVuln ID: EV0073
CVE: CVE-2006-0722
Vendor: Reamday Enterprises
Vendor's Web Site: http://reamdaysoft.com
Software: Magic Downloads
Sowtware's Web Site: http://reamdaysoft.com/customers/magic-downloads/download.html
Versions: 1.1.3
Critical Level: Moderate
Type: Unauthorized Data Modification
Class: Remote
Status: Unpatched. No reply from developer(s)
Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

Unauthorized Data Modification

Vulnerable script: settings.php

Variables $action $passwd $admin_password $new_passwd $confirm_passwd are not initialized and their values can be replaced by user-defined data. This can be used to make unauthorized modifications in config.php

Condition: register_globals = ON

Available at: http://evuln.com/vulns/73/exploit.html

No Patch available.

Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services

[ reply ]


Privacy Statement
Copyright 2010, SecurityFocus