Unscored CVE-2013-7195 EUVD-2013-6978GHSA-rqxj-58fq-78fr

PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request t…

Published Apr 18, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

PHPFox 3.7.3 and 3.7.4 allows remote authenticated users to bypass intended "Only Me" restrictions and "like" a publication via a request that specifies the ID for the publication.

References

66672 vdb-entry
phpfox-cve20137195-sec-bypass(92335) vdb-entry
20140405 Vulnerability in PHPFox v3.7.3, v3.7.4 and v3.7.5 all build [ CVE-2013-7195, CVE-2013-7196 ] mailing-list