Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-Site Request Forgery (CSRF) vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TDiary 跨站点伪造请求攻击
Vulnerability Description
TDiary 2.1.1、2.0.1及早期版本中存在跨站点伪造请求(CSRF)漏洞。这使得远程攻击者可以作为另一用户执行操作,并且可以借助于由用户激活的URL在服务器上执行命令。
CVSS Information
N/A
Vulnerability Type
N/A