Description
PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the (1) admin.php or (2) settings.php page.
References
- 20060509 plaNetStat Admin ByPass mailing-list
- planetstat-security-bypass(26436) vdb-entry
- 874 third-party-advisory