| Title | code-projects Simple Content Management System 1.0 Missing Authorization |
|---|
| Description | The file /web/admin/welcome.php in code-projects Simple Content Management System 1.0 does not perform any authentication or session validation before rendering the administrative "News Portal" panel. Although the application provides an admin login at /web/admin/login.php, welcome.php can be accessed directly via its URL without any valid session (no session_start() and no session check exist in the file). As a result, an unauthenticated remote attacker can reach the administrative interface and, by requesting /web/admin/welcome.php?addnews, access the "Add News" functionality (admin/addnews.php) intended for authenticated administrators only. This is a missing authorization / broken access control issue (CWE-862).
PoC:
1. Without authenticating (no valid session cookie), open http://localhost/web/admin/welcome.php -> the admin "Welcome to News Portal" panel is shown.
2. Open http://localhost/web/admin/welcome.php?addnews -> the "Add News" form (admin/addnews.php) is rendered and usable, allowing content creation without authentication.
Vulnerable code (admin/welcome.php):
<?php
if(isset($_GET['addnews'])){
include('addnews.php'); } // no session/authorization check
?>
The entire file contains no session_start() and no login/session verification before exposing admin functionality. |
|---|
| Source | ⚠️ https://github.com/YoonSunWoo02/CVE-simple-cms-broken-access-control |
|---|
| User | yoonsunwoo (UID 102060) |
|---|
| Submission | 10/11/2026 11:32 (22 days ago) |
|---|
| Moderation | 10/26/2026 18:23 (15 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 426553 [code-projects Simple Content Management System 1.0 Admin Interface /web/admin/welcome.php addnews authorization] |
|---|
| Points | 20 |
|---|