Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 06/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

admin.php in Newsletter ZWS allows remote malicious users to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.

Vulnerable Product	Search on Vulmon	Subscribe to Product
zaireweb solutions newsletter zws

source: wwwsecurityfocuscom/bid/10605/info Newsletter ZWS is reported prone to an administrative interface authentication bypass vulnerability The vulnerability exists due to a design error in the implementation of the authentication system for the interface The flaw allows a user to set their privileges through a URI parameter passed t ...

NVD-CWE-Other http://www.securityfocus.com/bid/10605 http://marc.info/?l=bugtraq&m=108811585025216&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/16507 https://nvd.nist.gov https://www.exploit-db.com/exploits/24235/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-0621

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect