Improper Authorization in ThinkSAAS v2.7 allows remote malicious users to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
thinksaas thinksaas 2.7 |