critical10.0Public exploit code
CVE-2007-2775
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alstrasoft Live Support 1.21 - Admin Credential Retrieve2007-05-20 · webapps · php · Verified
Impact
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | Live Support | Version 1.21 |
References
- NVD record
- CVE.org record
- http://itablackhawk.altervista.org/exploit/alsoft_exploit_pack
- http://osvdb.org/36638
- http://secunia.com/advisories/25337
- http://www.securityfocus.com/bid/24073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34395
- https://www.exploit-db.com/exploits/3957
- http://itablackhawk.altervista.org/exploit/alsoft_exploit_pack
- http://osvdb.org/36638
- http://secunia.com/advisories/25337
- http://www.securityfocus.com/bid/24073
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34395
- https://www.exploit-db.com/exploits/3957