CVE-2006-6973 | BDVDB-2026-22092 Detail

Description#

Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, which allows remote attackers to (1) reinstall the application via a direct request for install/index.php; (2) delete the database via a do=delete_database QUERY_STRING to a renamed copy of install/index.php; or access the administration system, after guessing a filename, via a direct request for a file in (3) admin/ or (4) tech/.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt

Exploit#

No public exploit known

History#

Version 12007-02-07Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.