PT-2006-2229 · Jiro · Jiro'S Banner System

Published 2006-03-14 · Updated 2018-10-18 · CVE-2006-1213

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JiRo's Banner System Experience and Professional versions 1.0 and earlier

Description The issue allows remote attackers to bypass access restrictions and gain privileges by making a direct request to certain scripts in the files directory. For example, an attacker can use the addadmin.asp script to create a new administrator account, demonstrating the potential for unauthorized access and privilege escalation.

Recommendations For versions 1.0 and earlier, consider restricting access to the files directory and its scripts, such as addadmin.asp, to minimize the risk of exploitation. As a temporary workaround, limit the functionality of these scripts until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2006-1213

Affected Products

Jiro'S Banner System

References · 10

• 🔥 http://nukedx.com/?viewdoc=19 · Exploit
• 🔥 https://exploit-db.com/exploits/1571 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1213 · Security Note
• http://secunia.com/advisories/19184 · Vendor Advisory
• http://vupen.com/english/advisories/2006/0911 · Note
• http://securityfocus.com/bid/17060 · Note
• http://securityfocus.com/archive/1/427326/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25169 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html · Note
• http://osvdb.org/23780 · Note