NetSight
IP …
critical9.8

CVE-2020-5616

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calenda…

Impact

[Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors.

Affected products

VendorProductAffected versions
Calendar01 ProjectCalendar01
Version 1.0.0
Calendar02 ProjectCalendar02
Version 1.0.0
Calendarform01 ProjectCalendarform01
through 1.0.3
Gallery01 ProjectGallery01
through 1.0.3
Link01 ProjectLink01
Version 1.0.0
Pkobo-News01 ProjectPkobo-News01
through 1.0.3
Pkobo-Vote01 ProjectPkobo-Vote01
through 1.0.1
Telop01 ProjectTelop01
Version 1.0.0

Weakness classification

CWE-287

References