| शीर्षक | PHPGurukul News Portal v1.0 Authorization Bypass |
|---|
| विवरण | The Django News Management Application contains a critical Broken Access Control vulnerability that allows Subadmin users (user_type=2) to bypass authorization controls and create new Subadmin accounts, despite this functionality being intentionally hidden from their user interface. The vulnerability exists because the application only implements client-side access control through UI restrictions, while the server-side endpoint lacks proper role-based authorization checks.
An authenticated Subadmin can directly access the /AddSubadmin URL endpoint (discovered from Admin interface or through reconnaissance) and successfully create new Subadmin accounts, effectively escalating their privileges and potentially creating backdoor accounts for persistent access.
Vulnerability Details:
1. Subadmin users can access the /AddSubadmin URL directly despite it being hidden from their UI
2. The endpoint only uses @login_required decorator without checking user_type
3. Subadmins can create new subadmin accounts with equal privileges
4. Newly created subadmins appear in the Admin panel's user management interface
5. No server-side validation prevents unauthorized account creation |
|---|
| स्रोत | ⚠️ https://github.com/rsecroot/News-Portal/blob/main/Broken%20Access%20Control.md |
|---|
| उपयोगकर्ता | hackerfactory (UID 85869) |
|---|
| सबमिशन | 12/01/2026 07:55 PM (9 महीनों पहले) |
|---|
| संयम | 25/01/2026 06:14 PM (13 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 341733 [PHPGurukul News Portal 1.0 Add Sub-Admin Page /admin/add-subadmins.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|