In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges.
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Simple_exam_reviewer_management_system | Simple_exam_reviewer_management_system_project | 1.0 (including) | 1.0 (including) |