NuytsTech Security

CVE-2002-0579

by ·

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.

Date published : 2002-06-11

http://www.securityfocus.com/bid/4552

http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html

Tags: