Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DNSTools验证可绕过漏洞
Vulnerability Description
DNSTools是一款基于WEB的DNS信息管理工具，由PHP语言实现，并可使用在Linux和Solaris操作系统下。 DNSTools验证处理中存在漏洞，可导致远程攻击者绕过验证机制以管理员权限访问系统。 DNSTools使用两个变量来保存用户验证状态(普通用户 / 管理员)，由于程序对这两个变量数据缺少正确充分的检查，攻击者可以简单的在URL中增加"user_logged_in=true"和管理员权限变量"user_dnstools_administrator=YES"，就能以管理员权限访问DNST
CVSS Information
N/A
Vulnerability Type
N/A