PT-2006-2229 · Jiro · Jiro'S Banner System

Publicado 2006-03-14 · Atualizado 2018-10-18 · CVE-2006-1213

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JiRo's Banner System Experience and Professional versions 1.0 and earlier

Description The issue allows remote attackers to bypass access restrictions and gain privileges by making a direct request to certain scripts in the files directory. For example, an attacker can use the addadmin.asp script to create a new administrator account, demonstrating the potential for unauthorized access and privilege escalation.

Recommendations For versions 1.0 and earlier, consider restricting access to the files directory and its scripts, such as addadmin.asp, to minimize the risk of exploitation. As a temporary workaround, limit the functionality of these scripts until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-1213

Produtos afetados

Jiro'S Banner System

Referências · 10

• 🔥 http://nukedx.com/?viewdoc=19 · Exploit
• 🔥 https://exploit-db.com/exploits/1571 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1213 · Nota de Segurança
• http://secunia.com/advisories/19184 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0911 · Nota
• http://securityfocus.com/bid/17060 · Nota
• http://securityfocus.com/archive/1/427326/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25169 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html · Nota
• http://osvdb.org/23780 · Nota