Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g6xr-c3q5-2cw3

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.

EPSS

Процентиль: 83%
0.01884
Низкий

Связанные уязвимости

nvd
больше 23 лет назад

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.

EPSS

Процентиль: 83%
0.01884
Низкий