2.1

CVE-2005-1932

Lpanel 1.59 and earlier, and other versions before 1.597, allows remote authenticated users to modify certain critical variables and (1) modify DNS settings for arbitrary domains via the domain parameter to diagnose.php, (2) close, open, or respond to arbitrary support tickets via the close, open, or pid parameter to view_ticket.php, (3) obtain sensitive information on arbitrary invoices via the inv parameter to viewreceipt.php, or (4) modify domain information for arbitrary domains via the editdomain parameter to domains.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lpanel ≫ Lpanel Version1.59
Lpanel ≫ Lpanel Version1.593
Lpanel ≫ Lpanel Version1.594
Lpanel ≫ Lpanel Version1.596
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.73% 0.495
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.1 3.9 2.9
AV:L/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/15589/
Vendor Advisory
http://www.securityfocus.com/bid/13869
Patch
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034414.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034415.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034416.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034417.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034418.html
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034419.html
http://www.lpanel.net/changelog.php