Description
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."
Unscored
CVE-2020-18741
EUVD-2020-10658GHSA-cmx5-qh3j-9rhp
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and …
Published Jul 8, 2021 · Updated Aug 4, 2024 · Assigned by mitre