CVE-2018-17037

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-09-14

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Ucms (Ucms Project)

References

• https://github.com/blackstar24/UCMS/blob/master/level.md