ZeroHour

CVE-2018-17037

PoC
CVSS 3.0
8.8 high
EPSS
<1%p59
Published
()
Modified
Description

user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.

Vendors
ucms project
Products
ucms
Weakness
CWE-732
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.