Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Blahz-DNS直接脚本调用验证可绕过漏洞
Vulnerability Description
Blahz-DNS是一款基于WEB的DNS信息管理工具,由PHP语言实现,可使用在Linux操作系统下。 Blahz-DNS验证处理中存在漏洞,可导致远程攻击者绕过验证机制以管理员权限访问系统。 Blahz-DNS只对登录页面实现验证处理,需要用户提供用户名和密码,攻击者可以通过直接调用Blahz-DNS中的其他脚本,就能绕过验证检查,无需密码以管理员权限全局访问Blahz-DNS所有功能如增加用户,改变用户等。
CVSS Information
N/A
Vulnerability Type
N/A