CVE-2020-18741

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."...

CVE-2020-18741

CVE-2020-18741 corresponds to an authorization vulnerability in ThinkSAAS v2.7. The issue allows remote attackers to modify the description of any user’s photo through the parameters photoid[] and photodesc[] in the component index.php?app=photo. The root cause is improper authorization, enabling...