Hello Guest, please login or register.
Did you miss your activation email?
Login with username, password and session length.

Pages: [1]   Go Down

Author Topic: Unclear usability issues / session hijack bug  (Read 3444 times)

0 Members and 1 Guest are viewing this topic.

thestig

Unclear usability issues / session hijack bug
« on: December 24, 2012, 12:06:22 am »
http://zfgc.com/index.php/resources/items/view/41
^ Moderation actions are still exposed upon drawing resource entries.

Its also possible to trick the CMS into thinking that you're another user by overriding the session id with an existing one that can match up with a user with higher-access privileges on the forum.
Logged
Pages: [1]   Go Up

 


Contact Us | Legal | Advertise Here
2013 © ZFGC, All Rights Reserved



Page created in 0.025 seconds with 37 queries.

anything