Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[item_id] parameter for the publication.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPFox 权限许可和访问控制漏洞
Vulnerability Description
Moxi9 PHPFox是瑞典Moxi9公司的一套社区软件。该软件包括论坛、博客、相册、音乐、投票、问答和视频等模块。 PHPFox 3.7.3，3.7.4及3.7.5版本的static/ajax.php脚本中存在安全漏洞。远程攻击者可借助修改的val[item_id]参数利用该漏洞绕过既定的‘Only Me’限制，并在私有板块发表评论。
CVSS Information
N/A
Vulnerability Type
N/A