| शीर्षक | code-projects Online Movie Streaming 1.0 Improper Authentication |
|---|
| विवरण | A Missing Authorization vulnerability exists in the admin panel of code-projects Online Movie Streaming 1.0. The admin.php and admin-control.php scripts fail to perform any server-side permission checks. While the UI hides the admin link from non-administrative users, any unauthenticated attacker can bypass this by directly navigating to the admin page URLs. This allows for unauthorized access to administrative functions, such as adding or modifying movie content on the site. |
|---|
| स्रोत | ⚠️ https://github.com/i-Corner/cve/issues/15 |
|---|
| उपयोगकर्ता | iC0rner (UID 82839) |
|---|
| सबमिशन | 30/07/2025 09:29 AM (1 वर्ष पहले) |
|---|
| संयम | 31/07/2025 08:52 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 318462 [code-projects Online Movie Streaming 1.0 /admin.php पहचान अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|