Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:14149
HistorySep 05, 2006 - 12:00 a.m.

Web Dictate Admin Null Password Vulnerability

2006-09-0500:00:00
vulners.com
24

Web Dictate Admin Null Password Vulnerability

Software: Web Dictate
Version: 1.02
Website: http://nchsoftware.com/

Description:
Web Dictate is a dictation system that lets you record, edit and manage dictation over the internet. You, and other users, log into a server running Web Dictate to record dictation with any ordinary web browser.

Vulnerability:
After assigning a password for the Admin account, it is possible to login as Admin with a null password.

Credit:
Discovered by Revnic Vasile