Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw72-x4ww-6v8j

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.

login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.

EPSS

Процентиль: 91%
0.07134
Низкий

Связанные уязвимости

nvd
больше 23 лет назад

login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.

EPSS

Процентиль: 91%
0.07134
Низкий