ID CVE-2005-3687
Summary cancel_account.php in WHM AutoPilot 2.5.30 and earlier allows remote attackers to cancel requests for arbitrary accounts via a modified c parameter.
References
Vulnerable Configurations
  • cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.6:*:*:*:*:*:*:*
    cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.6.5:*:*:*:*:*:*:*
    cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.7:*:*:*:*:*:*:*
    cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.7:*:*:*:*:*:*:*
  • cpe:2.3:a:whm_autopilot:whm_autopilot:2.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:whm_autopilot:whm_autopilot:2.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:whm_autopilot:whm_autopilot:2.5.20:*:*:*:*:*:*:*
    cpe:2.3:a:whm_autopilot:whm_autopilot:2.5.20:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 05-09-2008 - 20:55)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
bid 15483
secunia 17630
Last major update 05-09-2008 - 20:55
Published 19-11-2005 - 01:03
Last modified 05-09-2008 - 20:55
Back to Top