CVE-2017-15379
CriticalSummary
An authentication bypass exists in E-Sic 1.0 via '=' or 'or' values for the username and password in the /index (login) URI.
Risk Assessment
An attacker can gain access to the system without valid credentials, posing a serious threat to user data security.
Recommendation
It is recommended to update the software to the latest version and implement additional security measures, such as limiting login attempts.
Other vulnerabilities in E-Sic 1.0
See all- CVE-2017-15378High
SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI).
- CVE-2017-15381Critical
SQL Injection exists in E-Sic 1.0 via the f parameter to the zip code search script (buscacep.php).
- CVE-2017-15373Critical
E-Sic version 1.0 allows SQL injection via the q parameter in the esiclivre/restrito/inc/lkpcep.php file, which is part of the private search area.
Original NVD description (English source)
An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password.