Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Anthill postbug.php认证可绕过漏洞
Vulnerability Description
Anthill是一款用PHP开发的程序缺陷跟踪系统，可使用在Linux，unix或者Microsoft windows操作系统下。 Anthill在postbug.php验证处理上存在漏洞，可导致攻击者无需认证就可以提交缺陷信息。 Anthill 0.1.6.1和之前的版本包含postbug.php脚本，用于处理缺陷信息查询和增加缺陷信息到数据库中。通常用户通过enterbug.php脚本来验证通过，然后使用postbug.php来进行缺陷信息提交，由于postbug.php代码不需要验证，攻击者可以无需
CVSS Information
N/A
Vulnerability Type
N/A