CVE-2018-15888

CRITICAL

ASPCMS 2.5.6 - Unauthenticated Privilege Escalation via GroupID Manipulation

Title source: llm

Description

An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry x_refsource_misc

http://wooyun.org/bugs/wooyun-2015-091831

Exploit, Third Party Advisory x_refsource_misc

https://www.seebug.org/vuldb/ssvid-96205

Scores

CVSS v3 9.8

EPSS 0.0201

EPSS Percentile 78.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (1)

aspcms/aspcms 2.5.6

Published Aug 26, 2018

Tracked Since Feb 18, 2026