Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...
5CVSS7.2AI score0.01914EPSS
SaveExploits2References1
Mend•added 2023/01/19 12:00 a.m.•4 views
CVE-2022-46890
Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum this is caused by a lack of checks performed by the /forums.php?action=post page...