Описание
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
Ссылки
- Vendor Advisory
- ExploitVendor Advisory
- Vendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:jiro:banner_system:1.0_experience:*:*:*:*:*:*:*
cpe:2.3:a:jiro:banner_system:1.0_professional:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.08582
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
EPSS
Процентиль: 95%
0.08582
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other