Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Snitz Forum Cookie验证绕过漏洞
Vulnerability Description
Snitz Forums是一款基于WEB的ASP脚本编写的论坛程序。 Snitz Forums在处理Cookie验证过程中存在问题，远程攻击者利用这个漏洞可以绕过验证，无需密码以其他用户权限登录系统。 攻击者只要知道其他用户加密密码信息，就可以利用密码HASH信息，修改Cookie值，无需密码访问应用系统。攻击者可以利用跨站脚本攻击获得此信息，以自己帐户获得合法会话ID，然后修改用户名和加密密码信息来进行登录。
CVSS Information
N/A
Vulnerability Type
N/A