vendor:
Faweb_2
by:
indoushka
8,8
CVSS
HIGH
Multiple Vulnerabilities
N/A
CWE
Product Name: Faweb_2
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
2009
Faweb_2 Mullti Vulnerability
Faweb_2 is vulnerable to multiple vulnerabilities, including an upload vulnerability and a bypass vulnerability. The upload vulnerability allows an attacker to upload malicious files to the server, while the bypass vulnerability allows an attacker to bypass authentication and gain access to the admin panel. Both vulnerabilities can be exploited by sending a specially crafted HTTP request to the server.
Mitigation:
Apply the latest security patches and ensure that all user accounts have strong passwords.
