| शीर्षक | Code4Berry Decoration Management System 1.0 Improper Handling of Insufficient Permissions or Privileges |
|---|
| विवरण | A regular user can visit the endpoint /decoration/admin/user_permission.php and change the abilities delegated to each type of user, including themselves, admins or superadmins. By default, regular users only have permissions set to "Create Service", though they can add "Create User", "Delete User" and "Update Service" permissions to their own usertype, effectively making them equal to a superadmin. They can also remove all of these abilities from admins and superadmins.
|
|---|
| उपयोगकर्ता | scumdestroy (UID 48934) |
|---|
| सबमिशन | 12/11/2024 04:47 AM (2 साल पहले) |
|---|
| संयम | 20/11/2024 09:11 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 285501 [Code4Berry Decoration Management System 1.0 User Permission user_permission.php अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|