vendor:
Web Directory PRO
by:
Anonymous
7,8
CVSS
HIGH
Authentication Bypass
287
CWE
Product Name: Web Directory PRO
Affected Version From: 1.0
Affected Version To: 1.2
Patch Exists: YES
Related CWE: CVE-2020-12345
CPE: a:phpwebdirectoryscript:web_directory_pro
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: None
2020
change password Web Directory PRO
This vulnerability allows an attacker to bypass authentication and gain access to the web directory. The vulnerability exists in the Web Directory PRO application, which is vulnerable to an authentication bypass attack. The attacker can exploit this vulnerability by sending a specially crafted HTTP request to the application. This request will bypass the authentication and allow the attacker to gain access to the web directory.
Mitigation:
The application should be configured to use strong authentication mechanisms and should not rely on client-side authentication. Additionally, the application should be configured to use secure protocols such as TLS/SSL to protect the authentication process.
