Vulnerabilities > CVE-2017-17693 - Missing Authorization vulnerability in Techno - Portfolio Management Panel Project Techno - Portfolio Management Panel 1.0/20171116

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE

Summary

Techno - Portfolio Management Panel through 2017-11-16 does not check authorization for panel/portfolio.php?action=delete requests that remove feedback.

Common Weakness Enumeration (CWE)