CVE-2019-6126

Published: Jan 11, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff.

Affected (1)

Products: Advance Peer To Peer Mlm Script Project: Advance Peer To Peer Mlm Script

Advance Peer To Peer Mlm Script Project

1 product

Advance Peer To Peer Mlm Script

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Advance Peer To Peer Mlm Script Project Advance Peer To Peer Mlm Script	Version 1.7.0

Related CWEs

Direct Request ('Forced Browsing')

The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

References (2)

https://github.com/Mad-robot/CVE-List/blob/master/Advance%20Peer%20to%20Peer%20MLM%20Script.md

Source: cve@mitre.org

Third Party Advisory

https://github.com/Mad-robot/CVE-List/blob/master/Advance%20Peer%20to%20Peer%20MLM%20Script.md

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.