high7.5Public exploit code
CVE-2007-1471
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogN…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Orion-Blog 2.0 - Remote Authentication Bypass2007-03-15 · webapps · asp · Verified
Impact
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Orion-Blog | Orion-Blog | Version 2.0 |