revnic@gmail.com
04/09/06, 19:20
Web Dictate Admin Null Password Vulnerability
Software: Web Dictate
Version: 1.02
Website: http://nchsoftware.com/
Description:
Web Dictate is a dictation system that lets you record, edit and manage dictation over the internet. You, and other users, log into a server running Web Dictate to record dictation with any ordinary web browser.
Vulnerability:
After assigning a password for the Admin account, it is possible to login as Admin with a null password.
Credit:
Discovered by Revnic Vasile
Software: Web Dictate
Version: 1.02
Website: http://nchsoftware.com/
Description:
Web Dictate is a dictation system that lets you record, edit and manage dictation over the internet. You, and other users, log into a server running Web Dictate to record dictation with any ordinary web browser.
Vulnerability:
After assigning a password for the Admin account, it is possible to login as Admin with a null password.
Credit:
Discovered by Revnic Vasile