CVE-2017-17568

Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-12-13

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Posty Readymade Classifieds (Scubez)

References

• https://github.com/d4wner/Vulnerabilities-Report/blob/master/Readymade%20Classifieds%20Script.md