search

abitdodgy / cfw-usermanager

A user manager demo app for ColdFusion on Wheels
23 stars 11 forks source link

Mass Assignment vulnerability with email confirmation #9

Open abitdodgy opened 12 years ago

abitdodgy commented 12 years ago

The confirmed column in the db is vulnerable to mass assignment in the Users controller.