Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vc7h-x557-3c32

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.

admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.

EPSS

Процентиль: 87%
0.03613
Низкий

Дефекты

CWE-306

Связанные уязвимости

nvd
больше 16 лет назад

admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.

EPSS

Процентиль: 87%
0.03613
Низкий

Дефекты

CWE-306