CVE-2020-18741

Published: 2021-07-08T17:15Z

Last Modified: 2024-11-21T05:08Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo." > MITRE Terms of Use apply – see LICENSE‑MITRE.txt