UCMS Elevation of Privilege Vulnerability

UCMS is a content management system written in PHP. A security vulnerability exists in the user/editpost.php file in UCMS version 1.4.6. An attacker can exploit this vulnerability to elevate an ordinary user's level 1 privileges to a super user's level 3 privileges...