4726 matches found
CVE-2018-15833
In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference IDOR via the Poll ID, leading to the ability of a single user to select multiple Poll Options e.g., vote for multiple items...
CVE-2018-15833
In Vanilla Forums, versions before 2.6.1 are affected by an IDOR issue in the polling feature. The vulnerability arises because the Poll ID can be manipulated, allowing a single user to select multiple poll options (voting for multiple items). The impact is the unintended multiple-option voting w...
CVE-2018-15833
In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference IDOR via the Poll ID, leading to the ability of a single user to select multiple Poll Options e.g., vote for multiple items...
PT-2018-13225
Name of the Vulnerable Software and Affected Versions Vanilla versions prior to 2.6.1 Description The issue allows for Insecure Direct Object Reference IDOR via the Poll ID, enabling a single user to select multiple Poll Options, such as voting for multiple items. Recommendations For versions pri...
CVE-2018-15833: Authorization Bypass Through User-Controlled Key
In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference IDOR via the Poll ID, leading to the ability of a single user to select multiple Poll Options e.g., vote for multiple items...
Open-Xchange: CSRF combined with IDOR within Document Converter exposes files
Summary There appears to be a vulnerability with the document converter service which allows an authenticated user or guest user with write permissions to export a victim’s files, regardless of permissions in place. An example vulnerable endpoint is the following...
New Relic: [NR Insights] Pull any Insights/NRQL data from any NR account
@jonbottarini discovered an issue where a feature within a cloud integration wasn't properly validating account IDs. This report helped us identify a backend issue that could prevent account validation from taking place in certain situations. This was a fun one! The full writeup is for this bug i...
Yelp: I.D.O.R To Order,Book,Buy,reserve On YELP FOR FREE (UNAUTHORIZED USE OF OTHER USER'S CREDIT CARD)
@hk755a found an Insecure Direct Object Reference IDOR Vulnerability that allowed an attacker to pay with someone else's registered credit card, while ordering food with Grubhub through the /checkout/transactionplatform endpoint. No credit card information was disclosed as a result of this...
U.S. Dept Of Defense: IDOR
Summary: IDOR Description: By changing the value in the parameter █████████= from my own account █████ to something else such as ████████ it is possible to see barcode and expiration date of other ████ without their consent. Impact Information Disclosure Step-by-step Reproduction Instructions 1...
Pornhub: idor allows you to delete photos and album from a gallery
The researcher discovered a vulnerability where a user may delete other users' images from their galleries...
Improper access control
MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in...
CVE-2018-1000503
MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in...
CVE-2018-1000503
MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in...
CVE-2018-1000503
MyBB before 1.8.15 contains an Incorrect Access Control vulnerability in private forums that can allow viewing private forum posts without a password via an IDOR-like subscribe-to-forum action; fixed in 1.8.15.
PT-2018-9401
Name of the Vulnerable Software and Affected Versions MyBB versions prior to 1.8.15 Description The issue is related to Incorrect Access Control in Private forums, allowing users to view posts without having the password. This can be exploited by subscribing to a forum through an Insecure Direct...
CVE-2018-1000503: Improper Privilege Management
MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be exploitable via Subscribe to a forum through IDOR. This vulnerability appears to have been fixed in...
Valve: Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR
Summary - While testing Domain "steamcommunity.com", i found subsection "workshop" which has restriction to comment on workshop items of the game which i do now own in my account. This access control can be bypassed using IDOR and user can post comment though comment section is disabled on worksh...
CVE-2018-11346: Direct Request
An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "downloadsyssettings" action and then specify files arbitrarily throughout the system via the act parameter...
New Relic: Permissions leaks the full name of other NR accounts - Regression of #267636
One more before I run to dinner... Steps to Reproduce: 1. Add a user to your account 1. Enter "123" as the name and "[email protected]" as the email 1. Make them a "user" base role. 1. Click add user button. 2. Navigate to https://synthetics.newrelic.com/accounts/1523936/permissions 3. Create a...