CVE-2006-1213: Jiro Banner System

High severity, CVSS 7.5. EPSS: 8.8% chance of exploitation in the next 30 days.

JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.

Affected products

• Jiro Banner System: version 1.0_experience only; version 1.0_professional only

Published 2006-03-14. Last modified 2026-06-16.