Описание
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lightblog:lightblog:8.4.1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04593
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-287
Связанные уязвимости
github
почти 4 года назад
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
EPSS
Процентиль: 89%
0.04593
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-287