Obvious bug in Cogear CMS
This bug allows being registered to edit any topic of another person.
To edit your topic there is a link of the form: sitename / edit / xx / where xx is the number of the post.
By simply substituting numbers, you can edit any topic.
They just discovered it while testing the site on this cis.
')
To edit your topic there is a link of the form: sitename / edit / xx / where xx is the number of the post.
By simply substituting numbers, you can edit any topic.
They just discovered it while testing the site on this cis.
')
Source: https://habr.com/ru/post/77107/
All Articles