| शीर्षक | lceCMS lceCMS v 2.0.1 vertical override |
|---|
| विवरण | IceCMS is a content management system based on Spring Boot+Vue front-end and back-end separation.
IceCMS v2.0.1 has an unauthorized access level and is located in the Personal Information Modification area. Through the ordinary user, the administrator user's account, personal information and password can be modified, resulting in vertical override. The back-end code determines the identity based solely on the userId, which is how the vulnerability arises. It's very harmful. |
|---|
| स्रोत | ⚠️ http://x.x.x.x/chui/1.html |
|---|
| उपयोगकर्ता | zero121 (UID 59411) |
|---|
| सबमिशन | 05/12/2023 04:25 PM (3 साल पहले) |
|---|
| संयम | 13/12/2023 08:40 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 247889 [Thecosy IceCMS तक 2.0.1 User Data अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|