Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified (1) user_ids POST parameter or (2) userdata array.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Phorum users.php文件输入验证漏洞
Vulnerability Description
Phorum是一款基于PHP的WEB论坛程序，可在Linux和Unix操作系统下使用，也可在Microsoft Windows操作系统下使用。 Phorum 5.1.22之前版本中的include/controlcenter/users.php脚本中存在漏洞。可见如果$user_id为数组的话，在SQL查询中使用前没有执行任何过滤。但如果要利用这个漏洞，攻击者必须拥有有效的用户帐号且已登录。 拥有moderation权限的moderator可以修改任何用户的任意数据，包括管理员，因此任何拥有moderat
CVSS Information
N/A
Vulnerability Type
N/A