high7.5Public exploit code
CVE-2008-6739
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator pri…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASP Download 1.03 - Arbitrary Change Administrator Account2008-06-10 · webapps · asp · Verified
Impact
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toddwoolums | Asp Download | Version 1.03 |