Name of the Vulnerable Software and Affected Versions:

Agenzia Impresa Eccobook versions 2.81.1

Description:

An incorrect access control issue exists in CaricaVerbale within Agenzia Impresa Eccobook. Authenticated attackers with low-level access can escalate privileges to Administrator.

Recommendations:

At the moment, there is no information about a newer version that contains a fix for this vulnerability.