CVE-2018-19853 in hitshop

सारांश

द्वारा MITRE

An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole web site) via the admin.php/user/add URI because a storekeeper account (which is supposed to have only privileges for commodity management) can add an administrator account.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• आरक्षित करना: 04/12/2018
• प्रकटीकरण: 04/12/2018
• संयम: स्वीकृत
• प्रविष्टि: VDB-127474
• CPE: तैयार
• CWE: CWE-269 (पुष्टि की गई)
• CVSS: 8.8 (NVD)
• EPSS: 0.00947
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-19853
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-19853
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-19853/