Unscored CVE-2005-0301 EUVD-2005-0302GHSA-fvmg-v5c3-236w

comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via …

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

comersus_backoffice_install10.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to bypass authentication and gain privileges via a direct request to the program.

References

http://www.comersus.org/forum/displayMessage.asp?mid=32753
20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 mailing-list
http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html
backoffice-lite-administrative-bypass(19010) vdb-entry