Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

There was a problem

You must be a member of this account.

Exponent CMS → 2.3.5: Administrators may be able to edit super-administrator profiles

#1322

Information

Vulnerability Type : Exponent CMS → 2.3.5: Parameter Tampering Information Disclosure
Vulnerable Version : 2.3.5
CVE-ID :
Severity: Medium
Author – Sachin Wagh (@tiger_tigerboy)

Description

Exponent CMS is prone to a Parameter Tampering Information Disclosure because it fails to sanitize user-supplied input.By changing the value it is possible to see any user information such as superadmin and it is also possible to guess how many user are exist.

Credits & Authors
Sachin Wagh (@tiger_tigerboy)

Reported by Sachin Wagh · December 25th, 2015 @ 08:14 PM

State: resolved
Milestone: 2.3.7
Assigned to: dleffler dleffler

Activity

  1. Sachin Wagh
    Sachin Wagh

    Hi dleffer,

    Even if the user admin or superadmin can see the information vice versa by tampering parameter.

    Thanks.

    December 26th, 2015 @ 05:06 PM

  2. expNinja
    expNinja
    • State changed from new to resolved

    (from [1d8f6e4eec369da5d2d05928cfa75ac8dbedc3c8]) Fixes security issue where an admin user could possibly edit a super-admin user [#1322 state:resolved] https://github.com/exponentcms/exponent-cms/commit/1d8f6e4eec369da5...

    December 26th, 2015 @ 05:56 PM

  3. Sachin Wagh
    Sachin Wagh

    Ok dleffer.

    Thanks.

    December 26th, 2015 @ 05:56 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.