| tiêu đề | PHPGurukul Pre-School Enrollment System 1.0 access control |
|---|
| Mô tả | There is a vertical override vulnerability in the/admin/add-subadmin.php system. In the system design, only super administrators can add sub administrators, but due to the lack of verification of user session identity in request verification. Resulting in low privileged users being able to successfully send requests to add sub administrators directly.Please refer to the following source code for details. |
|---|
| Nguồn | ⚠️ https://github.com/SECWG/cve/issues/3 |
|---|
| Người dùng | WenGui (UID 82184) |
|---|
| Đệ trình | 05/03/2025 17:11 (cách đây 2 những năm) |
|---|
| Kiểm duyệt | 07/03/2025 07:21 (2 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 298904 [PHPGurukul Pre-School Enrollment System 1.0 Sub Admin /admin/add-subadmin.php nâng cao đặc quyền] |
|---|
| điểm | 19 |
|---|