JVN#80771386 Fulltext search CGI vulnerability allows third party to gain administrative privileges

Fulltext search CGI is a website search software from futomi’s CGI Cafe. Fulltext search CGI contains a vulnerability that allows an attacker to gain administrative privileges.

Impact

A remote attacker could impersonate an administrator of fulltext search CGI.

Solution

Update the Software
Update to the latest version according to the information provided by the vendor.
Workarounds
As a workaround to this vulnerability, change the settings in the server where the software is installed and disable access to the administrator menu until the software is updated.

Products Affected

• Fulltext search CGI Ver. 1.1.2