Incorrect Handling of Empty rights Parameter in delegateAll Function

Lines of code Vulnerability details Description The delegateAll function does not correctly handle the case where the rights parameter is empty. In this case, the function will attempt to write an empty string to the Storage.POSITIONSRIGHTS storage location. This behavior could lead to unexpected...

CVE-2006-6878: Undefined Security Weakness

admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights7 parameter to 1 during a login action...