Description
Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentication via unknown vectors.
References
- 100607 vdb-entry
- sharetronix-cve20135356-security-bypass(89505) vdb-entry
- 64102 vdb-entry
- http://secunia.com/secunia_research/2013-12/
- 53936 third-party-advisory