CVE-2013-7196
MEDIUM 5.5EPSS 2.3%
static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[item_id] parameter for the publication.
- CVSS v2.0 NVD
- 5.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:N - EPSS
- 2.32% chance of exploitation in the next 30 days, 83rd percentile
- Published
- 2014-04-18
- Updated
- 2024-08-06