Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-39x3-rj4g-g64f

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.

EPSS

Процентиль: 75%
0.00906
Низкий

Связанные уязвимости

nvd
больше 18 лет назад

Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin account, which allows remote attackers to cause a denial of service (overwritten files) and possibly obtain administrative access.

EPSS

Процентиль: 75%
0.00906
Низкий