CVE-2019-6126

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0

Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved by directly navigating to "admin/dashboard.php" or "admin/user.php", resulting in the disclosure of information about users and staff.

Recommendations For PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0, consider restricting access to the "admin/dashboard.php" and "admin/user.php" endpoints to minimize the risk of exploitation. Additionally, review and implement proper access controls to prevent unauthorized access to sensitive information.