Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
details2.php in OrganicPHP PHP-affiliate 1.0, and possibly later versions, allows remote attackers to modify information of other users by modifying certain hidden form fields.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP affiliate远程更改用户信息漏洞
Vulnerability Description
PHP Affiliate是一款站点URL信息加入程序，可以用于显示连接、标题等推广站点。 PHP Affiliate中的details.php对用户提交的输入缺少正确检查，远程攻击者可以利用这个漏洞修改其他用户的站点连接信息。 details.php包含一个表单用于相关的帐户改变其详细的信息。用户ID会通过隐藏的表单提交给details2.php，但由于缺少相关的验证机制，任意用户可以更改这个隐藏字段为任意其他用户ID，并通过这个漏洞编辑其他用户的相关信息。
CVSS Information
N/A
Vulnerability Type
N/A