Description
user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.
Unscored
CVE-2018-17037
EUVD-2018-8820GHSA-6hg6-3rfr-94g3
user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3.
Published Sep 14, 2018 · Updated Aug 5, 2024 · Assigned by mitre