Beveiligingsadvies

CVE-2007-5441

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2007-10-14 18:00:00

Laatst bijgewerkt 2024-08-07 15:31:58

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.

← Alle CVE's bekijken Bekijk op cve.org ↗