Vulnerabilities > CVE-2002-0579 - Unspecified vulnerability in Workforceroi Xpede 4.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
workforceroi

Summary

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.

Vulnerable Configurations

Part Description Count
Application
Workforceroi
1