Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2018/04/15 6:19 a.m.41 views

ExpressionEngine: [EE] change the author of post using the author_id

@flex0geek discovered that users with permission to edit entries in the control panel could manipulate the form or POST submission and set an invalid author as the author of that entry. @flex0geek gave a detailed report with step-by-step instructions for replicating and screen captures of a their...

1.3AI score
SaveExploits0
Rows per page
Query Builder