PT-2008-5802 · Belong · Belong Software Site Builder

Romancyxhacker

·

CVE-2008-4585

·

Published

2008-10-15

·

Updated

2018-10-11

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Belong Software Site Builder version 0.1 beta
Description The issue allows remote attackers to bypass intended access restrictions and perform administrative actions. This is achieved via a direct request to the "admin/home.php" endpoint.
Recommendations For Belong Software Site Builder version 0.1 beta, consider restricting access to the "admin/home.php" endpoint until a patch is available.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-4585

Affected Products

Belong Software Site Builder