JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2006-03-13 17:06
Updated : 2018-10-18 09:31
NVD link : CVE-2006-1213
Mitre link : CVE-2006-1213
JSON object : View
CWE
Products Affected
jiro
- banner_system