Design/Logic Flaw

2017-12-1309:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.2%

JSON

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.

References

github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md