CVE-2018-7581

HIGH 7.8CVE-2018-7581 · Published 09/03/2018 · updated 17/06/2026

In short

CVE-2018-7581 is a HIGH (CVSS 7.8) vulnerability affecting weblog expert (weblogexpert).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weblog expert weblogexpert	`= 9.4`	No fix yet

Description

\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), which allows local users to set a cleartext password and login as admin.

References

hyp3rlinx.altervista.org/advisories/WEBLOG-EXPERT-WEB-SERVER-ENTERPRISE-v9.4-AUTHENTICATION-BYPASS.txt · Exploit
packetstormsecurity.com/files/146697/WebLog-Expert-Web-Server-Enterprise-9.4-Weak-Permissions.html · Exploit
exploit-db.com/exploits/44270 · Exploit

More vulnerabilities in weblog expert

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free