Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hjmw-7h65-p64w

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.

EPSS

Процентиль: 88%
0.04023
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 16 лет назад

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.

EPSS

Процентиль: 88%
0.04023
Низкий

Дефекты

CWE-287