Описание
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
Ссылки
- Vendor Advisory
- ExploitVendor Advisory
- Vendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:jiro:banner_system:1.0_experience:*:*:*:*:*:*:*
cpe:2.3:a:jiro:banner_system:1.0_professional:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04325
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
EPSS
Процентиль: 89%
0.04325
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other