Advertisement






adobe connect 10 Local Path Disclosure

CVE Category Price Severity
CVE-2018-16027 CWE-200 $3,000 High
Author Risk Exploitation Type Date
Marcin Bury High Local 2021-02-04
CVSS EPSS EPSSP
CVSS:4.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 0.021 0.501

CVSS vector description

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2021020010

Below is a copy:

adobe connect 10 Local Path Disclosure
# Exploit Title:  adobe connect 10 Local Path Disclosure
# Date: 2021/02/02
# Exploit Author: mahdi eidi
# Vendor Homepage: https://www.adobe.com
# Software Link:  https://www.adobe.com/products/adobeconnect.html
# Version: 10 and earlier
# Tested on: Windows 10 & firefox
# Category : Web Application Bugs

# Description:
By adding this (system/help/support) path to the end of the main web address (url) you can see the administrator username.Even without a username and password

# demo :
>https://npac.mapnanyp.com/system/help/support
>https://vc.shdu.ac.ir/system/help/support

Copyright ©2024 Exploitalert.

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum