CVE-2007-2822 | BDVDB-2026-24327 Detail

Description#

TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/25358
https://www.exploit-db.com/exploits/3963
http://www.wavelinkmedia.com/scripts/tutorialcms/
http://osvdb.org/36520
https://exchange.xforce.ibmcloud.com/vulnerabilities/34401
http://www.vupen.com/english/advisories/2007/1903

Exploit#

https://www.exploit-db.com/exploits/3963

History#

Version 12007-05-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.