cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
lightblog lightblog 8.4.1.1 |