Vulnerabilities > Scubez > High

DATE CVE VULNERABILITY TITLE RISK
2017-12-13 CVE-2017-17568 Incorrect Permission Assignment for Critical Resource vulnerability in Scubez Posty Readymade Classifieds
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.
network
low complexity
scubez CWE-732
7.5
2017-12-13 CVE-2017-17567 SQL Injection vulnerability in Scubez Posty Readymade Classifieds
Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.
network
low complexity
scubez CWE-89
7.5