The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
235 vulnerabilities with CWE-425
CVE-2005-1827
D-Link DSL-504T Firmware - Unauthenticated Privilege Escalation via Direct Request
CVE-2005-1697
PostNuke 0.750 and 0.760RC2-RC3 - Information Disclosure via RSS Module Direct Request
CVE-2005-1698
PostNuke 0.750-0.760RC3 - Info Disclosure
CVE-2005-1685
episodex_guestbook - Unauthenticated Authentication Bypass via Direct Request to admin.asp
CVE-2005-1688
MEDIUM
WordPress < 1.5 - Information Disclosure via Direct Request to Theme and Admin Files
CVSS 5.3
CVE-2005-1654
Hosting Controller < 6.1 Hotfix 1.9 - Unauthenticated Arbitrary User Registration via Direct Request
CVE-2005-1668
YusASP Web Asset Manager 1.0 - Privilege Escalation
CVE-2004-2144
Baal Smart Forms <3.2 - Auth Bypass
CVE-2004-2257
MEDIUM
phpMyFAQ 1.4.0 - Unauthenticated Image Manager Access via Direct Request
CVSS 5.3
CVE-2002-1798
CRITICAL
MidiCart PHP Unauthenticated Arbitrary File Upload and Information Disclosure
CVSS 9.1
Details
Vulnerabilities
235