Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WorkforceROI Xpede密码加密算法不强壮漏洞
Vulnerability Description
Intellisol Xpede是一款基于浏览器结合使用的时间和费用，项目成本管理的金融相关系统，运行在Microsoft Windows操作系统平台下。 Intellisol Xpede由于设计密码算法不够强壮可以导致密码泄露漏洞。 Intellisol Xpede对用户的密码使用很简单的移位和置换混合算法，攻击者可以方便的还原密码，如果用户获得相关COOKIE就可以利用跨站脚本代码可执行等漏洞获得相关密码信息并解密。
CVSS Information
N/A
Vulnerability Type
N/A