Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileges by setting the admin cookie to an arbitrary value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alguest Cookie可伪造漏洞
Vulnerability Description
Alguest是一款由PHP实现MySQL后台支持的留言本程序，运行在多种Unix和Linux系统平台下，也可运行于Windows平台下。 Alguest在对COOKIE信息的权限检查存在漏洞，可导致攻击者以管理员身份访问留言本系统。 Alguest存在一个设计缺陷，在COOKIE数据处理中没有正确检查管理员权限，只通过"elseif(isset($admin))"代码来检查COOKIE数据是否存在，因此任意用户可以建立COOKIE并获得管理员权限访问。
CVSS Information
N/A
Vulnerability Type
N/A