critical10.0Public exploit code
CVE-2004-1695
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EmuLive Server4 - Authentication Bypass / Denial of Service2004-09-21 · dos · cgi · Verified
Impact
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emulive | Server4 | Version commerce_build_7560 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109577497718374&w=2
- http://secunia.com/advisories/12616
- http://www.gulftech.org/?node=research&article_id=00051-09202004
- http://www.securityfocus.com/bid/11226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17450
- http://marc.info/?l=bugtraq&m=109577497718374&w=2
- http://secunia.com/advisories/12616
- http://www.gulftech.org/?node=research&article_id=00051-09202004
- http://www.securityfocus.com/bid/11226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17450