ZeroCMS 'zero_transact_user.php' Privilege Escalation Vulnerability
BID:68050
Info
ZeroCMS 'zero_transact_user.php' Privilege Escalation Vulnerability
| Bugtraq ID: | 68050 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2014 12:00AM |
| Updated: | Jun 13 2014 12:00AM |
| Credit: | Tiago Carvalho |
| Vulnerable: |
Another Awesome Stuff ZeroCMS 1.0 |
| Not Vulnerable: | |
Discussion
ZeroCMS 'zero_transact_user.php' Privilege Escalation Vulnerability
ZeroCMS is prone to a privilege-escalation vulnerability.
An attacker can leverage this issue to gain escalated privileges and perform unauthorized actions which may aid in launching further attacks.
ZeroCMS 1.0 is vulnerable; other versions may also be affected.
ZeroCMS is prone to a privilege-escalation vulnerability.
An attacker can leverage this issue to gain escalated privileges and perform unauthorized actions which may aid in launching further attacks.
ZeroCMS 1.0 is vulnerable; other versions may also be affected.
Exploit / POC
ZeroCMS 'zero_transact_user.php' Privilege Escalation Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
ZeroCMS 'zero_transact_user.php' Privilege Escalation Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].