CVEvulnerability
CVE-2004-1695
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-09-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash).
Affected configurations
• emulive server4 commerce build 7560
References
- http://marc.info/?l=bugtraq&m=109577497718374&w=2 marc.info
- http://secunia.com/advisories/12616 Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00051-09202004 Vendor Advisory
- http://www.securityfocus.com/bid/11226 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17450 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109577497718374&w=2 marc.info
- http://secunia.com/advisories/12616 Vendor Advisory
- http://www.gulftech.org/?node=research&article_id=00051-09202004 Vendor Advisory
- http://www.securityfocus.com/bid/11226 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17450 exchange.xforce.ibmcloud.com