PT-2019-17966
CVE-2019-6126
·
تاريخ النشر
2019-01-11
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0
Description
The issue allows remote attackers to bypass intended access restrictions. This can be achieved by directly navigating to "admin/dashboard.php" or "admin/user.php", resulting in the disclosure of information about users and staff.
Recommendations
For PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0, consider restricting access to the "admin/dashboard.php" and "admin/user.php" endpoints to minimize the risk of exploitation. Additionally, review and implement proper access controls to prevent unauthorized access to sensitive information.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾