preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.01193
Percentile: 0.77966

CVSS Scoring

Affected Products

• cpe:2.3:a:sips:sips:0.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:sips:sips:0.3.0:*:*:*:*:*:*:*
• cpe:2.3:a:sips:sips:0.3.0pl1:*:*:*:*:*:*:*
• cpe:2.3:a:sips:sips:0.3.0pl2:*:*:*:*:*:*:*

← Back to Home