CVE-2007-0184

Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that bypasses the include/exclude checks.

Date published : 2007-01-10

http://www.securityfocus.com/bid/21955

http://getahead.ltd.uk/dwr/changelog