CVE Catalog
CVE-2017-17568
HighSummary
Scubez Posty Readymade Classifieds has incorrect access control for the admin/user_activate_submit.php script, which may allow remote attackers to obtain sensitive information via a direct request.
Risk Assessment
The organization may be exposed to data leakage, potentially leading to a loss of confidentiality of user information.
Recommendation
It is recommended to implement appropriate access control mechanisms and review the source code to secure the admin/user_activate_submit.php script.
Other vulnerabilities in Scubez Posty Readymade Classifieds
Original NVD description (English source)
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS