Vulnerability in Matthew Redman Allmanage

CVE-2000-0435

The allmanageup.pl file upload CGI script in the Allmanage Website administration software 2.6 can be called directly by remote attackers, which allows them to modify user accounts or web pages.

EPSS: 0.016 (73.5th percentile) — read the EPSS interpretation.

Affected products

Matthew_redman Allmanage — versions 2.6
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)