1910 matches found
Design/Logic Flaw
A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public a...
Design/Logic Flaw
A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed t...
CVE-2017-20081 Hindu Matrimonial Script reports.php privileges management
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2017-20080
The CVE-2017-20080 entry relates to Hindu Matrimonial Script, where the file /admin/googleads.php suffers from improper privilege management. The vulnerability can be exploited remotely and exploitation has been disclosed publicly. Documented impact centers on privilege handling; no specific patc...
CVE-2017-20075 Hindu Matrimonial Script payment.php privileges management
A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2017-20075 Hindu Matrimonial Script payment.php privileges management
A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2017-20073 Hindu Matrimonial Script cms.php privileges management
A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclose...
CVE-2017-20072 Hindu Matrimonial Script generalsettings.php privileges management
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed t...
CVE-2017-20068
CVE-2017-20068 affects Hindu Matrimonial Script. Affected component: the file /admin/usermanagement.php, where manipulation leads to improper privilege management. The vulnerability may be exploited remotely and, per sources, the exploit has been disclosed publicly. Multiple coordinated feeds (NV...
Hindu Matrimonial Script 安全漏洞
A security vulnerability exists in Hindu Matrimonial Script, an online matrimonial service website of PHP Matrimonial Script India, which stems from improper privilege management in /admin/payment.php. No details of the vulnerability are currently available...
Hindu Matrimonial Script 安全漏洞
Hindu Matrimonial Script, an online marriage service website from PHP Matrimonial Script India, has a security vulnerability that could be exploited by attackers to cause improper privilege management...
Hindu Matrimonial Script 安全漏洞
A security vulnerability exists in Hindu Matrimonial Script, an online matrimonial service website of PHP Matrimonial Script India, which stems from improper privilege management in /admin/newsletter1.php. No details of the vulnerability are currently available...
Design/Logic Flaw
A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely...
CVE-2022-30739
CVE-2022-30739 concerns an improper privilege management vulnerability in Samsung Account prior to version 13.2.00.6. The vulnerability allows attackers with normal permissions to obtain a user’s email or phone number. The connected documents consistently describe the affected product as Samsung ...
GHSA-2W4H-F44W-968F Improper Privilege Management in Neo4j Graph Database
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges...
Improper privilege management - Anyone can view room settings.
Description Hi bigbluebutton maintainers, I would like to report an improper privilege management, this allows anyone to view any room settings. Proof of Concept 1. To demonstrate the vulnerability, I've created a room https://demo.bigbluebutton.org/gl/hoa-j4s-sxx-5gn 2. Run this curl command to...
CVE-2022-1770
CVE-2022-1770 describes an issue of improper privilege management in the GitHub repository polonel/trudesk, affecting versions prior to 1.2.2. The provided description does not specify the exact component, module, or surface affected, nor the concrete exploit path, impact scope, or root cause det...
Cybozu Garoon 安全漏洞
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. Cybozu Garoon suffers from an authorization issue vulnerability that originates from improper privilege managemen...
GHSA-XJX9-7C29-PWMM Moodle Improper Privilege Management
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
