Search vulnerabilities

Results 1

Export CSV
CVE-2021-27522

Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function. By modifying the initial letter of the key of a user cookie, the key of the administrator cookie can be obtained.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Products