Authorization

Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the 1 importForm, 2 importFeed, 3 addFavorite, or 4 removeFavorite actions in action.php...

PT-2013-3860

Name of the Vulnerable Software and Affected Versions Leed Light Feed versions prior to 1.5 Stable Description The issue allows remote attackers to bypass authorization. This can be achieved via vectors related to the 1 importForm, 2 importFeed, 3 addFavorite, or 4 removeFavorite actions in the...

CVE-2013-2629: Improper Input Validation

Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the 1 importForm, 2 importFeed, 3 addFavorite, or 4 removeFavorite actions in action.php...