• info
• discussion
• exploit
• solution
• references

phpScheduleIt 'useLogonName' Security Bypass Vulnerability

phpScheduleIt is prone to a vulnerability that gives an attacker unauthorized access to administration areas of the application because the software fails to properly restrict access in an unspecified script.

An attacker can leverage this vulnerability to gain administrative access to the application.

Versions up to and including phpScheduleIt 1.2.9 are vulnerable.