Authentication flaw

2017-10-2308:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.4%

An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via ‘=’‘or’ values for the username and password.

CPENameOperatorVersion
e-siceq1.0

CPE	Name	Operator	Version
	e-sic	eq	1.0

References

whiteboyz.xyz/esic-software-publico-autentication-bypass.html

www.exploit-db.com/exploits/42980/