phpScheduleIt

9 Reservation Modification Security Vulnerability - ID: 1051841

Last Update: Settings changed ( lqqkout13 )

Details:

There is a bug in all versions of phpScheduleIt that
allows a knowledgeable user to modify or delete a
reservation.

Submitted:

Nick Korbel ( lqqkout13 ) - 2004-10-21 23:07

Priority:

Status:

Closed

Resolution:

Fixed

Assigned:

Nick Korbel

Category:

1.0.0

Group:

None

Visibility:

Public

Date: 2004-10-21 23:13 Sender: lqqkout13 Logged In: YES user_id=690051 Please download and install the attached file. There is only two files in this zip, 'Reservation.class.php' and 'readme.txt', an instruction file. Simply replace your current version of Reservation.class.php with the downloaded one.

Filename	Description	Download
phpScheduleIt_1051841_patch.zip	Patched Reservation.class.php file	Download

Field	Old Value	Date	By
status_id	Open	2004-11-16 14:41	lqqkout13
close_date	-	2004-11-16 14:41	lqqkout13
File Added	106007: phpScheduleIt_1051841_patch.zip	2004-10-21 23:13	lqqkout13
resolution_id	None	2004-10-21 23:13	lqqkout13