MitsubaBBS / Mitsuba

Project Mitsuba - an opensource imageboard software written in PHP
http://mitsuba.cf/
Other
42 stars 20 forks source link

Moderators elevating permissions through cookies #88

Open TheAdamGalloway opened 9 years ago

TheAdamGalloway commented 9 years ago

As moderator privileges are stored in binary in a plaintext cookie, it's possible for janitors or moderators to change the 0's to 1's to elevate their priviledges.

techjanitor commented 8 years ago

lol