CVE-2003-1255

add_bookmark.php in Active PHP Bookmarks (APB) 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified auth_user_id parameter.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Affected products

• Active Php Bookmarks (Active Php Bookmarks)

References

• http://archives.neohapsis.com/archives/bugtraq/2003-01/0049.html
• http://www.securityfocus.com/bid/6546
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11011