Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/06/15 12:00 a.m.•46 views

Incorrect Authorization in thinkcmf

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

6.5CVSS4.1AI score0.00762EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/06/14 10:15 a.m.•11 views

CVE-2021-40616

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

6.5CVSS6.6AI score0.00762EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•7 views

CVE-2021-40616: Direct Request

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

6.5CVSS6.6AI score0.00762EPSS
SaveExploits1References2
OSV
OSV
•added 2021/03/10 4:15 p.m.•19 views

CVE-2021-0390

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User...

7.8CVSS7.2AI score0.00238EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/10 4:15 p.m.•14 views

CVE-2021-0390

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User...

7.8CVSS7.4AI score0.00238EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/10 12:00 a.m.•7 views

CVE-2021-0390: Missing Authorization

In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User...

7.8CVSS5.9AI score0.00238EPSS
SaveExploits0References2
myhack58
myhack58
•added 2011/03/02 12:00 a.m.•38 views

FeiXun enterprise website management system v2011 upload vulnerabilities pass to kill 0day-vulnerability warning-the black bar safety net

Affected version: v2011 Official website: http://www.webhtm.cn PRODUCT DESCRIPTION: Suitable Agent building a Business Site of the enterprise source code, The aspect of the practical! Program description: 1. Features: simplified and Traditional Chinese switch, the product display system, news...

6.8AI score
SaveExploits0
Rows per page
Query Builder