Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpWebLog管理员认证绕过漏洞
Vulnerability Description
phpWebLog 0.4.2版本的common.inc.php不能正确初始化$CONF数组，这不注意地设置密码到单个字符。远程攻击者很容易的猜测SiteKey和获得管理员特权到phpWebLog。
CVSS Information
N/A
Vulnerability Type
N/A