CVE-2017-7571

Recent Vulnerabilities Research Posts Trends Blog About Contact

6

CVSSv2

Published: 06/04/2017 Updated: 01/04/2021

CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8

CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1

VMScore: 605

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ladybirdweb faveo helpdesk 1.9.3

# Exploit Title: CSRF / Privilege Escalation (Manipulation of Role Agent to Admin) on Faveo version Community 193 # Google Dork: no # Date: 05-April-2017 # Exploit Author: @rungga_reksya, @yokoacc, @AdyWikradinata, @dickysofficial, @dvnrcy # Vendor Homepage: wwwfaveohelpdeskcom/ # Software Link: codeloadgithubcom/ladybirdweb/fa ...

CWE-352 https://github.com/ladybirdweb/faveo-helpdesk/issues/446 http://rungga.blogspot.co.id/2017/04/csrf-privilege-escalation-manipulation.html http://www.securityfocus.com/bid/97493 https://www.exploit-db.com/exploits/41830/https://nvd.nist.gov https://www.exploit-db.com/exploits/41830/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-7571

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect