Vulnerabilities > CVE-2020-19888 - Incorrect Authorization vulnerability in Dbhcms Project Dbhcms 1.2.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE

Summary

DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table.

Vulnerable Configurations

Part Description Count
Application
Dbhcms_Project
1

Common Weakness Enumeration (CWE)