diff --git a/CVE-2014-0165.md b/CVE-2014-0165.md index 81427ea..a2da78f 100644 --- a/CVE-2014-0165.md +++ b/CVE-2014-0165.md @@ -1,9 +1,17 @@ +From the researcher (edik) who found the vulnerability: + Using the bulk edit feature you can publish posts and pages PUBLICLY without the publishing-cap. The problem is that there are no checks for publishing-cap's on serverside. It's only protected in UI. How to reproduce: + 1. Login as contributor + 2. Create a draft post + 3. Mark the draft in post list and open the bulk edit form -4. Make use of tools like Firebug to change a value in the status dropdown. You have to set the value of an entry to 'publish' -5. Select the changed status entry -6. Push the button and welcome to the next level \ No newline at end of file + +4. Make use of tools like Firebug to change a value in the status dropdown. You have to set the value of an entry to 'publish' + +5. Select the changed status entry + +6. Push the button and welcome to the next level