Skip to content
OpenAdvisories
High · 7.3 CVE-2016-15002 EUVD-2016-2076GHSA-64vp-q339-g7h5

MONyog Ultimate Cookie privileges management

Published Jun 9, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely.

Affected products

VendorProductAffectedFixed
— MONyog Ultimate 6.63 —

References