Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun NetDynamics会话ID劫持漏洞
Vulnerability Description
Netdynamics 4.x至5.x版及其可能早期版本的ndcgi.exe存在漏洞。远程攻击可以通过读取登录字段的SPIDERSESSION和uniqueValue变量盗取会话IDs并劫持用户会话，然后在下次用户登录时使用这些变量。
CVSS Information
N/A
Vulnerability Type
N/A