CVE-2016-15002

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@vuldb.com

Published

2022-06-09

Last modified

2025-04-15

Weaknesses

CWE-269, CWE-565

Affected products

• Webyog Monyog Ultimate (Ideracorp)
• Monyog Ultimate (Unspecified)

References

• https://vuldb.com/?id.98355
• https://youtu.be/KKlwi-u6wyA