CVE-2011-2676 in A-Form
Summary
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
07/07/2011
Disclosure
11/03/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 59359 | Ark-web A-Form improper authentication | 287 | Not defined | Official fix | CVE-2011-2676 |