漏洞标题
N/A
漏洞描述信息
照片整理器2.32b及其早期版本未正确检查某些对象的所有权,这导致远程攻击者可以通过(1)相机删除、(2)相机编辑、(3)文件/文件夹删除、(4)照片.移动、(5)内容.索引器、(6)文件.内容等操作获得未经授权的访问。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to (1) camera del, (2) camera edit, (3) folder/album deletion, (4) photo.move, (5) content.indexer, (6) folder.content, and possibly other operations.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Photo Organizer多个对象输入验证漏洞
漏洞描述信息
Photo Organizer未正确检查某些对象的属主,远程攻击者可通过和(1)camera del,(2)camera edit,(3)folder/album deletion,(4)photo.move,(5)content.indexer,(6)folder.content及可能其它操作相关的向量获取未授权访问。
CVSS信息
N/A
漏洞类别
授权问题