ID de Prueba:	1.3.6.1.4.1.25623.1.0.16227
Categoría:	Web application abuses
Título:	Comersus BackOffice Lite Administrative Bypass
Resumen:	Comersus ASP shopping cart is a set of ASP scripts creating an online; shoppingcart. It works on a database of your own choosing, default is msaccess, and includes online; administration tools.
Descripción:	Summary: Comersus ASP shopping cart is a set of ASP scripts creating an online shoppingcart. It works on a database of your own choosing, default is msaccess, and includes online administration tools. Vulnerability Impact: By accessing the /comersus_backoffice_install10.asp file it is possible to bypass the need to authenticate as an administrative user. Solution: Delete the file '/comersus_backoffice_install10.asp' from the server as it is not needed after the installation process has been completed. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0301 Bugtraq: 20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 (Google Search) http://marc.info/?l=bugtraq&m=110636597832556&w=2 http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html XForce ISS Database: backoffice-lite-administrative-bypass(19010) https://exchange.xforce.ibmcloud.com/vulnerabilities/19010
Copyright	Copyright (C) 2005 Noam Rathaus

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.