PT-2021-10232

Name of the Vulnerable Software and Affected Versions: ThinkSAAS version 2.7 Description: The issue allows remote attackers to modify the description of any user's photo. This is achieved via the photoid and photodesc parameters in the "index.php?app=photo" component. Recommendations: For ThinkSA...

CVE-2020-18741: Undefined Security Weakness

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."...