CVE-2006-1213 - JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account

Back Back to CVE browser

HIGH

JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account

Published Mar 14, 2006

7.5

HIGH

CVSS 2.0

EPSS 8.78%

Description

JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html
mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/19184
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.nukedx.com/?viewdoc=19
x_refsource_MISCExploitVendor Advisory
http://www.osvdb.org/23780
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427326/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17060
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0911
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1217
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25169
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html		mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/19184		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.nukedx.com/?viewdoc=19		x_refsource_MISCExploitVendor Advisory
http://www.osvdb.org/23780		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/427326/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/17060		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/0911		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1217		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25169		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 14, 2006

Updated Aug 7, 2024

Reserved Mar 14, 2006

Link CVE-2006-1213

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1213

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 14, 2006

Updated Aug 7, 2024

Link EUVD-2006-1217

GitHub

No data