CVE-2023-46501

KO | EN

gitlite — search

#hacktoberfest #react #typescript #llm #go #golang #deep-learning #macos #awesome #kubernetes #vue #mcp #ios #openai

(★ 14)

BoltWire v6.03 vulnerable to "Improper Access Control"

CVE-2023-46501 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CVE-2023-46501 - BoltWire v6.03 - Improper Access Control

## Description
In version **6.03 of BoltWire CMS**, it is possible to exploit an “Improper Access Control” vulnerability, through the `index.php?p=member.admin&action=data` parameter, allowing an attacker to view any member's password, including the from the admin, thus allowing the theft of information, arbitrary changes to data or manipulation of the application for malicious purposes.

## To Fix
Update to the latest version of BoltWire CMS.

## Steps to Reproduce:

**1)** Create a new member.
![step 1](https://raw.githubusercontent.com/Cyber-Wo0dy/CVE-2023-46501/main/img/1.png)

**2)** Access the following URL:
`http://domain.com/folder/index.php?p=member.admin&action=data`

_Note:_ replace _`http://domain.com/folder/`_ with the address of the application to be tested.

**3)** As a result, you will be able to view the admin password.
![step 3](https://raw.githubusercontent.com/Cyber-Wo0dy/CVE-2023-46501/main/img/2.png)

**4)** To view other users' passwords, simply change the _“admin”_ parameter in the URL provided above to another user's name, for example `member.user`.

CVE-2023-46501

CVE-2023-46501 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

CVE-2023-46501

CVE-2023-46501 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README