Description
AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config.
References
- 21787 vdb-entry
- host-directory-admin-security-bypass(31123) vdb-entry
- 20061227 Host directory full disclosure and input error mailing-list