Security Advisory

CVE-2008-3033

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-07-07 18:20:00

Last updated 2024-08-07 09:21:34

Assigner mitre

State PUBLISHED

Description

RSS-aggregator 1.0 does not require administrative authentication for the admin/fonctions/ directory, which allows remote attackers to access admin functions and have unspecified other impact, as demonstrated by (1) an IdFlux request to supprimer_flux.php and (2) a TpsRafraich request to modifier_tps_rafraich.php.

← Browse all CVEs View on cve.org ↗