Files
CVEs-PoC/2014/CVE-2014-9361.md
2025-09-29 21:09:30 +02:00

755 B

CVE-2014-9361

Description

The LoginToboggan module 7.x-1.x before 7.x-1.4 for Drupal does not properly unset the authorized user role for certain users, which allows remote attackers with the pre-authorized role to gain privileges and possibly obtain sensitive information by accessing a Page Not Found (404) page.

POC

Reference

Github

No PoCs found on GitHub currently.