Navigation

Pligg Support

Hello pligg developer,
I have setup new stable pligg 2.0 for this site: http://www.pliggus.com/ And found one in-secured issue.

I think user level permission for "moderator" is not secured because a moderator can create new user as an admin. In this way a moderator make himself as an admin by a new account, after then he can do anything.

So I think, Pligg 2.0 need to develop user access level permission.

Best Regards,
Md. Arif Hossain Khan (Nion)

Web Developer – EMEA Online Production | GraphicPeople | Enfatico | House # 76/A, 3rd Floor, Road #11 Banani | Dhaka 1213 Bangladesh | O: + 88 02 8816707 | M: + 88 01710267610

Possible Answers

Who Upvoted this Story

Who Downvoted this Story