CVE-2018-15888

2018-08-2621:00:00

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.006

Percentile

79.2%

JSON

An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly.

References

wooyun.org/bugs/wooyun-2015-091831

www.seebug.org/vuldb/ssvid-96205