CVE-2018-17037

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...

CVE-2018-17037: Incorrect Permission Assignment for Critical Resource

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...

PT-2018-13853

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description The issue in UCMS allows escalation from the normal user level of 1 to the superuser level of 3 due to mishandling of levels in the user/editpost.php file. Recommendations For UCMS version 1.4.6, consider...