Vulnerability CVE-2007-6056
Published: 2007-11-20   Modified: 2012-02-12

Description:
frame.html in Aida-Web (Aida Web) allows remote attackers to bypass a protection mechanism and obtain comment and task details via modified values to the (1) Mehr and (2) SUPER parameters.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Aida-Web Information Exposure
MC Iglo
24.11.2007

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Aida-orga -> Aida-web 

 References:
http://securityreason.com/securityalert/3385
http://www.securityfocus.com/archive/1/483749/100/0/threaded
http://www.securityfocus.com/bid/26464
https://exchange.xforce.ibmcloud.com/vulnerabilities/38504
Copyright 2024, cxsecurity.com

 

Back to Top