Back to search
CVE-2007-0873
Published: Feb 12, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (1) config_edit.php, (2) template_edit.php, or (3) survey_edit.php in admin/.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://forums.avenir-geopolitique.net/viewtopic.php?t=2643
x_refsource_MISC
2232
third-party-advisory
x_refsource_SREASON
33692
vdb-entry
x_refsource_OSVDB
22509
vdb-entry
x_refsource_BID
20070210 nabopoll 1.1.2 sensitive file (admin without password)
mailing-list
x_refsource_BUGTRAQ
3305
exploit
x_refsource_EXPLOIT-DB
20070215 [milw0rm] exploit 3305
mailing-list
x_refsource_VIM
nabopoll-adminscripts-unauthorized-access(32472)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now