जमा करें #303196: Junnan Wang and his team Dreamer CMS 4.1.3 Common users have administrator rightsजानकारी

शीर्षकJunnan Wang and his team Dreamer CMS 4.1.3 Common users have administrator rights
विवरणAs an ordinary account, it should not have the permission to delete attachments, forms and variables, and attackers can delete important files of the system through ordinary accounts.Common users have excessive permissions
स्रोत⚠️ https://github.com/sweatxi/BugHub/blob/main/dreamer_Excessive_authority.pdf
उपयोगकर्ता
 hexixi (UID 59932)
सबमिशन22/03/2024 09:16 PM (3 साल पहले)
संयम30/03/2024 07:36 AM (7 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि258779 [Dreamer CMS तक 4.1.3 Attachment अधिकार वृद्धि]
अंक16

Want to know what is going to be exploited?

We predict KEV entries!