We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 7426e72 commit 127d073Copy full SHA for 127d073
modules/exploits/multi/http/traq_plugin_exec.rb
@@ -18,7 +18,7 @@ def initialize(info={})
18
Traq 2.0 to 2.3. It's in the admincp/common.php script.
19
20
This function is called in each script located in the /admicp/ directory to
21
- make sure the user has admin rights. This is a broken authorization schema
+ make sure the user has admin rights. This is a broken authorization schema
22
because the header() function doesn't stop the execution flow.
23
This can be exploited by malicious users to execute admin functionality,
24
e.g. execution of arbitrary PHP code leveraging of plugins.php functionality.
0 commit comments