[isf-wifidog] Unsuitable Admin access

Bruno Remy bruno.remy at videotron.ca
Mer 5 Mar 17:28:08 EST 2008


Hello,

When a single user (not an admin) logs into tha "admin" page 
(http://auth.zapquebec.org/admin/index.php)
he is not supposed to see this frame :



It's a critical security failure, because he can acces to the "reusable 
content library" and not only in "Read-only" but he  can modify or 
delete items !



This feature  has to be disabled.

Bruno


Plus d'informations sur la liste de diffusion WiFiDog