Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr6w-c957-wqqh

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.

EPSS

Процентиль: 85%
0.02558
Низкий

Связанные уязвимости

nvd
около 22 лет назад

admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password.

EPSS

Процентиль: 85%
0.02558
Низкий