vendor:
Asp Scripts
by:
JxE-13 [ Ro0T-MaFia ]
7,5
CVSS
HIGH
Login ByPass
287
CWE
Product Name: Asp Scripts
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2009
AW-BannerAd Login ByPass By JxE-13 [ Ro0T-MaFia ]
This exploit allows an attacker to bypass the authentication of the AW-BannerAd Asp Scripts. The vulnerable file is adv/admin/index.asp and the user and password are ' or 'x'='x :' or 'x'='x.
Mitigation:
Ensure that authentication credentials are properly validated and that user input is properly sanitized.
