CVE-2013-4621

Magnolia CMS before 4.5.9 contains multiple access bypass vulnerabilities that let a non-admin user access and execute administrative functionality via direct URLs. Affected versions include Magnolia CMS

Magnolia CMS 4.5.8 Access Bypass

Subject: ====== Multiple access control vulnerabilities in Magnolia CMS, Community and Enterprise editions CVE ID: ======= CVE-2013-4621 Summary: ======== A non-admin user such as default users eric / peter can access and execute multiple administrative functionalities of the CMS by accessing...