Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Forums!信息提交用户验证不安全漏洞
Vulnerability Description
Forums!是一款使用Allaire Cold Fusion服务器后台支持的基于WEB的BBS程序,来源于开放源代码的Allaire Forums软件。 Forums!在新信息提交过程中存在验证漏洞,可以导致以其他用户身份向论坛提交信息。 Forums!对提交信息的用户身份鉴别依靠从CGI提供的值来判断,而此值是通过隐藏表单域(HIDDEN)传递的,这些值可以简单的通过系统任意用户在本地修改并提交,导致任意用户可以用其他用户身份发表信息。
CVSS Information
N/A
Vulnerability Type
N/A