PPDB Online by Bekenweb - Privilege Escalation Vulnerability

CVE	Category	Price	Severity
N/A	CWE-269	N/A	High

Author	Risk	Exploitation Type	Date
bekenweb	High	Remote	2022-05-08

CVSS	EPSS	EPSSP
Exploit details mention that no CVSS scores are available for the exploit at this time.	0.02192	0.50148

CVSS vector description

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2022050029

Below is a copy:

PPDB Online by Bekenweb - Privilege Escalation Vulnerability

[DEMO]
1. Register at https://www.ppdb.man2cianjur.sch.id/ppdb
2. Login at https://www.ppdb.man2cianjur.sch.id/login
3. Visit https://www.ppdb.man2cianjur.sch.id/list-admin
4. Add a new admin with the Admin role and we have successfully upgraded the privileges from a normal user to an Administrator.

Vendor: https://www.bekenweb.com/#ppdb_online

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.