PT-2012-5979
CVE-2012-5454
·
تاريخ النشر
2012-10-22
·
تاريخ التحديث
2013-04-11
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ATutor AContent versions 1.2-1
Description
The issue is related to improper access restriction in the user/index inline editor submit.php file, allowing remote authenticated users to modify arbitrary user passwords via a crafted request. This might be due to an incomplete fix for a previous issue.
Recommendations
For ATutor AContent versions 1.2-1, restrict access to the user/index inline editor submit.php file to prevent unauthorized password modifications. As a temporary workaround, consider disabling the password modification functionality until a proper fix is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾