Description
dynaliens 2.0 and 2.1 allows remote attackers to bypass authentication and perform certain privileged actions via a direct request for (1) validlien.php3 (2) supprlien.php3 (3) supprub.php3 (4) validlien.php3 (5) confsuppr.php3 (6) modiflien.php3, or (7) confmodif.php3 in admin/.
References
- 20070308 dynaliens v2.0/v2.1 bypass admin authentification + XSS mailing-list
- http://forums.avenir-geopolitique.net/viewtopic.php?t=2722
- 22873 vdb-entry
- 2403 third-party-advisory