OSVDB ID: 1911

Title: Mambo Open Source index2.php Administrator Password Bypass

Info

Disclosure
Jul 24, 2001

Discovery
Jul 24, 2001

Dates

Exploit
Jul 24, 2001

Solution
Unknown

Description

 index2.php in Mambo Site Server allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.

Classification

 Location: Remote/Network Access Required
OSVDB: Web Related

Solution

 Upgrade to version 4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Mambo Open Source

Mambo Server

 3.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/36218