medium6.4Public exploit code
CVE-2006-2771
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a mod…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hogstorps Guestbook 2.0 - Unauthorized Access2006-05-01 · webapps · asp · Verified
Impact
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hogstorps | Hogstorp Guestbook | Version 2.0 |
References
- NVD record
- CVE.org record
- http://colander.altervista.org/advisory/HTGuestBook2.txt
- http://secunia.com/advisories/20402
- http://www.securityfocus.com/bid/18205
- http://www.vupen.com/english/advisories/2006/2082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26979
- http://colander.altervista.org/advisory/HTGuestBook2.txt
- http://secunia.com/advisories/20402
- http://www.securityfocus.com/bid/18205
- http://www.vupen.com/english/advisories/2006/2082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26979