JiRo's Banner System Experience and Professional 1.0 and previous versions allows remote malicious users to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jiro banner system 1.0_experience |
||
jiro banner system 1.0_professional |