Steps to reproduce:
1. Open Browser, enter URL:
[DELETED]
[fixed] News: no permission check in action.editarticle.php
[fixed] News: no permission check in action.editarticle.php
Last edited by dwave on Fri Aug 26, 2011 3:35 pm, edited 1 time in total.
Re: News: no permission check in action.editarticle.php
Previous versions of CMS Made Simple are also affected.
Very nice.
Try the submit button
Very nice.
Try the submit button
Re: News: no permission check in action.editarticle.php
Wow. Lets get this removed from the forum.
Re: News: no permission check in action.editarticle.php
this one is fixed in SVN for 1.10.
Ronny
Ronny
Re: News: no permission check in action.editarticle.php
Shouldn't this also be (hot)fixed for - at least - 1.9 too?
Re: News: no permission check in action.editarticle.php
Most definitely.
Re: News: no permission check in action.editarticle.php
I agree. I edited my initial post and removed the URL. It was stupid to post it here but I thought only 1.10 was affected.cb2004 wrote:Wow. Lets get this removed from the forum.