Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qw95-2v38-2pp5

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "", which is present in the password file and probably passes an insufficient comparison.

The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "", which is present in the password file and probably passes an insufficient comparison.

EPSS

Процентиль: 85%
0.02365
Низкий

Связанные уязвимости

nvd
больше 17 лет назад

The admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges by setting the logininfo cookie to "<?php" or "?>", which is present in the password file and probably passes an insufficient comparison.

EPSS

Процентиль: 85%
0.02365
Низкий