high7.2Public exploit code
CVE-2015-4027
The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Acunetix WVS 10 - Local Privilege Escalation2015-12-02 · local · windows
Impact
The AcuWVSSchedulerv10 service in Acunetix Web Vulnerability Scanner (WVS) before 10 build 20151125 allows local users to gain privileges via a command parameter in the reporttemplate property in a params JSON object to api/addScan.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acunetix | Web Vulnerability Scanner | through 10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134602/Acunetix-WVS-10-Local-Privilege-Escalation.html
- https://www.acunetix.com/blog/releases/acunetix-10-build-includes-security-checks-in-cors-configurations/
- https://www.exploit-db.com/exploits/38847/
- http://packetstormsecurity.com/files/134602/Acunetix-WVS-10-Local-Privilege-Escalation.html
- https://www.acunetix.com/blog/releases/acunetix-10-build-includes-security-checks-in-cors-configurations/
- https://www.exploit-db.com/exploits/38847/