Design/Logic Flaw

2018-08-2621:29:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.2%

JSON

An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly.

CPENameOperatorVersion
aspcmseq2.5.6

CPE	Name	Operator	Version
	aspcms	eq	2.5.6

References

wooyun.org/bugs/wooyun-2015-091831

www.seebug.org/vuldb/ssvid-96205