| Title | YZNCMS YznCMS 2.1.5 Privilege Escalation |
|---|
| Description | A security vulnerability has been identified in YznCMS up to 2.1.5.
The issue resides within the component /auth.group/add. An attacker can leverage this by sending a specially crafted request, leading to Privilege Escalation. In detail, YznCMS utilizes a Role-Based Access Control (RBAC) model, where the super administrator possesses all permissions, while regular administrators only have partial permissions. However, the system does not strictly restrict the permissions of regular administrators. Consequently, a regular administrator with only partial permissions can successfully create a super administrator.
Although a traditional functional exploit/PoC is not publicly disclosed to prevent immediate weaponization, the vulnerability is fully validated and documented by the official patch. The vendor has acknowledged the flaw and implemented input sanitization/proper access control to mitigate this risk. Please refer to the provided official fix commit link in the reference section for full source code modifications and technical diff details. |
|---|
| Source | ⚠️ https://gitee.com/ken678/YZNCMS/commit/ed16cd7f7f73e0316ffa8a148d |
|---|
| User | danieluec (UID 61228) |
|---|
| Submission | 10/13/2026 01:41 (20 days ago) |
|---|
| Moderation | 10/31/2026 08:01 (18 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 429502 [ken678 YznCMS up to 2.2.0 Auth Group Group.php Backend privileges management] |
|---|
| Points | 20 |
|---|