Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 16:42:18 +0000 CVE-2024-24573 — facileManager Privilege Escalation via Mass Assignment https://cve.radiocsirt.org/vuln/cve-2024-24573 <p><strong>Affected:</strong> WillyXJ facileManager</p> <p>facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/processPost.php. It was found that non-admins can arbitrarily set their permissions and grant their non-admin accounts with super user privileges.</p> <p><strong>Affected:</strong> WillyXJ facileManager</p> <p>facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/processPost.php. It was found that non-admins can arbitrarily set their permissions and grant their non-admin accounts with super user privileges.</p> https://cve.radiocsirt.org/vuln/cve-2024-24573