Vulnerabilities > CVE-2020-18741 - Unspecified vulnerability in Thinksaas 2.7
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |