| Package | Affected versions | Patched versions |
|---|---|---|
| banner system | = 1.0_experience= 1.0_professional |
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free