Submit #303196: Junnan Wang and his team Dreamer CMS 4.1.3 Common users have administrator rightsinfo

TitleJunnan Wang and his team Dreamer CMS 4.1.3 Common users have administrator rights
DescriptionAs an ordinary account, it should not have the permission to delete attachments, forms and variables, and attackers can delete important files of the system through ordinary accounts.Common users have excessive permissions
Source⚠️ https://github.com/sweatxi/BugHub/blob/main/dreamer_Excessive_authority.pdf
User
 hexixi (UID 59932)
Submission03/22/2024 21:16 (2 years ago)
Moderation03/30/2024 07:36 (7 days later)
StatusAccepted
VulDB entry258779 [Dreamer CMS up to 4.1.3 Attachment permission]
Points16

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!