Required CVE Record Information
Description
static/ajax.php in PHPFox 3.7.3, 3.7.4, and 3.7.5 allows remote authenticated users to bypass intended "Only Me" restrictions and comment on a private publication via a request with a modified val[item_id] parameter for the publication.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- exchange.xforce.ibmcloud.com: phpfox-cve20137196-sec-bypass(92336) vdb-entryx_transferred
- securityfocus.com: 66677 vdb-entryx_transferred
- securityfocus.com: 20140405 Vulnerability in PHPFox v3.7.3, v3.7.4 and v3.7.5 all build [ CVE-2013-7195, CVE-2013-7196 ] mailing-listx_transferred