CVE-2022-26254

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names...

CVE-2022-1072

CVE-2022-1072 is a reserved candidate; however, connected records identify CVE-2022-26254 as the active entry. The affected software is WoWonder The Ultimate PHP Social Network Platform v4.0.0, which contains an access control flaw allowing unauthenticated attackers to arbitrarily rename group ID...

CVE-2022-26254

CVE-2022-26254 affects WoWonder The Ultimate PHP Social Network Platform v4.0.0. The connected Red Hat and CVE sources corroborate a post-authentication bypass of access controls that lets unauthenticated attackers arbitrarily change group ID names. The description consistently states an access c...