CVE Database
/

CVE-2002-0579

Back to search

CVE-2002-0579

Published: Jun 11, 2002

Modified: Aug 8, 2024

PUBLISHED

Description

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.

VendorProductVersions

n/a

n/a

affected
n/a

References

4552
vdb-entry
x_refsource_BID
20020419 Xpede many vulnerabilities
mailing-list
x_refsource_BUGTRAQ
xpede-insecure-admin-scripts(8900)
vdb-entry
x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now