Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p6h7-49cc-wmww

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

EPSS

Процентиль: 74%
0.00846
Низкий

Связанные уязвимости

nvd
больше 23 лет назад

Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.

EPSS

Процентиль: 74%
0.00846
Низкий