backup.php in HandsomeWeb SOS Webpages prior to 1.1.12 does not require knowledge of the cleartext password, which allows remote malicious users to bypass authentication by leveraging knowledge of the administrator password hash.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
handsomeweb sos webpages |