medium6.4
CVE-2010-1191
Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended access restrictions and disable administrato…
Impact
Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended access restrictions and disable administrator authentication via a direct request to stream.php in an acl_enable_acl action to the admin module.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sahanafoundation | Sahana | Version 0.6.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/39020
- http://sourceforge.net/tracker/?func=detail&aid=2970786&group_id=127855&atid=709778
- http://www.securityfocus.com/archive/1/510164/100/0/threaded
- http://secunia.com/advisories/39020
- http://sourceforge.net/tracker/?func=detail&aid=2970786&group_id=127855&atid=709778
- http://www.securityfocus.com/archive/1/510164/100/0/threaded