Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2008-0391
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-0391

Description:
inc/elementz.php in aliTalk 1.9.1.1 does not properly verify authentication, which allows remote attackers to add an arbitrary user account via a modified lilil parameter, in conjunction with the ubild and pa parameters.

CVE Status:
Candidate

References:

MILW0RM
  http://www.milw0rm.com/exploits/4922

BID
  27315


Return to the previous page.