Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 Qulture.Rocks: Privilege escalation from member user ( editor ) to admin user
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 Qulture.Rocks: Privilege escalation from member user ( editor ) to admin user


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vulners.com


image
Qulture.Rocks has multiple levels of admins, where you could manage parts of the application. One of those levels had a wrong configuration, which did not blocked it from updating its level to a higher one. Our team worked rapidly to fix this issue, blocking said level of updating... ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 Qulture.Rocks: Privilege escalation from member user ( editor ) to admin user


📈 97.67 Punkte

📌 Qulture.Rocks: Unrestricted File Upload in Chat Window


📈 52.55 Punkte

📌 Qulture.Rocks: Server Name disclosure


📈 52.55 Punkte

📌 YzmCMS 5.8 Member User member/member/add.html cross-site request forgery


📈 44.32 Punkte

📌 CVE-2023-1948 | PHPGurukul BP Monitoring Management System 1.0 Add New Family Member add-family-member.php Member Name cross site scripting


📈 39.88 Punkte

📌 Sitecore Rocks Plugin up to 2.1.148 Service privilege escalation


📈 26.71 Punkte

📌 MyPHP Forum member.php member sql injection


📈 26.59 Punkte

📌 XMB Forum 1.11/1.6/1.8 member.php member cross site scripting


📈 26.59 Punkte

📌 XMB Forum 1.11/1.6/1.8 member.php member cross site scripting


📈 26.59 Punkte

📌 A-Member/A-Member for MT Cloud bis 3.8.6 SQL Injection [CVE-2017-10898]


📈 26.59 Punkte

📌 CVE-2023-24775 | Funadmin 3.2.0 \member\Member.php selectFields sql injection


📈 26.59 Punkte

📌 Zendesk: Privilege escalation - Support-Contributor to Support and Product Admin via `/api/v2/██████` . No ADMIN PRIVILEGE required.


📈 24.76 Punkte

📌 WordPress up to 5.4.1 Block Editor editor/wp-admin cross site scriting


📈 24.22 Punkte

📌 CVE-2023-40852 | PHPGurukul User Registration & Login and User Management System with Admin Panel Admin Login page sql injection (Exploit 51695 / EDB-51695)


📈 22.53 Punkte

📌 Zomplog 3.8.2 Admin Account admin privilege escalation


📈 21.06 Punkte

📌 SignKorn Guestbook admin/admin.php dir_path privilege escalation


📈 21.06 Punkte

📌 Monit up to 3.7.2 /admin/users/update admin privilege escalation


📈 21.06 Punkte

📌 Swape Theme up to 1.2.0 on WordPress Access Control wp-admin/admin-ajax.php xmlPath privilege escalation


📈 21.06 Punkte

📌 estatik Plugin up to 2.3.0 on WordPress File Upload wp-admin/admin-ajax.php es_media_images[] privilege escalation


📈 21.06 Punkte

📌 estatik Plugin up to 2.2.x on WordPress File Upload wp-admin/admin-ajax.php es_media_images[] privilege escalation


📈 21.06 Punkte

📌 Mansion Productions Member Area System 1.7 view_func.php privilege escalation [Disputed]


📈 20.71 Punkte

📌 Kaqoo Auction Software member.inc.php install_root privilege escalation


📈 20.71 Punkte

📌 Oracle up to 16.2 Team Member privilege escalation


📈 20.71 Punkte

📌 DeDeCMS up to 5.6 File Upload member/article_edit.php templet privilege escalation


📈 20.71 Punkte

📌 Ultimate Member Plugin up to 2.0.3 on WordPress Access Restriction privilege escalation


📈 20.71 Punkte

📌 Ultimate Member Plugin up to 2.0.3 on WordPress privilege escalation


📈 20.71 Punkte

📌 Ultimate Member Plugin up to 2.0.3 on WordPress Image File privilege escalation


📈 20.71 Punkte

📌 Niushop B2B2C Multi-Business Basic 1.11 member.php avatar privilege escalation


📈 20.71 Punkte

📌 AspCMS 2.5.6 /member/reg.asp addUser privilege escalation


📈 20.71 Punkte

📌 SeaCMS 7.2 member.php Request privilege escalation


📈 20.71 Punkte

📌 DeDeCMS 5.7SP2 Password Reset member/resetpassword.php id privilege escalation


📈 20.71 Punkte

📌 Ultimate Member Plugin 2.39 on WordPress Password Reset user_id privilege escalation


📈 20.71 Punkte

📌 Ultimate Member Plugin 2.39 on WordPress Picture user_id privilege escalation


📈 20.71 Punkte

📌 Critical privilege escalation bugs squashed in WordPress Ultimate Member plugin


📈 20.71 Punkte

📌 [webapps] WordPress Plugin User Role Editor < 4.25 - Privilege Escalation


📈 20.56 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software