PT-2018-11516

CVE-2018-12984

·

Publicado

2018-06-29

·

Atualizado

2018-08-20

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Hycus CMS version 1.0.4
Description The issue allows for authentication bypass by using specific credentials, including username and password with a value of '=' 'OR'. This can potentially allow unauthorized access to the system.
Recommendations For Hycus CMS version 1.0.4, update the authentication mechanism to properly validate and sanitize user input to prevent bypass attempts. As a temporary workaround, consider implementing additional authentication checks to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾