Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The login protocol in RealChat 3.5.1b does not use authentication, which allows remote attackers to log on as other users by sniffing the beginning of a chat session and replaying it via a modified username.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RealChat login 非授权用户登陆漏洞
Vulnerability Description
RealChat是一个web在线聊天系统。 RealChat 3.5.1b中的登录协议未使用认证,使攻击者可以系统其他用户的身份登陆。远程攻击者通过嗅探聊天会话的开始部分,并修改用户名,重放会话,从而以其他用户的身份登录系统。
CVSS Information
N/A
Vulnerability Type
N/A