PT-2018-11516

CVE-2018-12984

·

Published

2018-06-29

·

Updated

2018-08-20

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Hycus CMS version 1.0.4
Description The issue allows for authentication bypass by using specific credentials, including username and password with a value of '=' 'OR'. This can potentially allow unauthorized access to the system.
Recommendations For Hycus CMS version 1.0.4, update the authentication mechanism to properly validate and sanitize user input to prevent bypass attempts. As a temporary workaround, consider implementing additional authentication checks to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾