YusASP Web Asset Manager 1.0 allows remote malicious users to gain privileges via a direct request to assetmanager.asp.
yusasp web asset manager 1.0