[fixed] News: no permission check in action.editarticle.php
Posted: Thu Aug 25, 2011 10:10 pm
Steps to reproduce:
1. Open Browser, enter URL:
[DELETED]
1. Open Browser, enter URL:
[DELETED]
CMS Made Simple Forums
Content management as it is meant to be
https://forum.cmsmadesimple.org/
[fixed] News: no permission check in action.editarticle.php
Page 1 of 1
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 7:01 am
Oh confirmed, reproduced.
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 1:51 pm
Previous versions of CMS Made Simple are also affected.
Very nice.
Try the submit button
Very nice.
Try the submit button
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 2:58 pm
Wow. Lets get this removed from the forum.
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 3:04 pm
this one is fixed in SVN for 1.10.
Ronny
Ronny
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 3:27 pm
Shouldn't this also be (hot)fixed for - at least - 1.9 too?
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 3:31 pm
Most definitely.
Re: News: no permission check in action.editarticle.php
Posted: Fri Aug 26, 2011 3:35 pm
I agree. I edited my initial post and removed the URL. It was stupid to post it here but I thought only 1.10 was affected.cb2004 wrote:Wow. Lets get this removed from the forum.