Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Archilles Newsworld信息泄露漏洞
Vulnerability Description
Archilles Newsworld 1.5.0-rc1之前的版本将(1) account.nwd和(2) session.nwd存储在Web根目录下，但没有充分的访问控制，这可让远程攻击者获取敏感信息，例如用户名、密码散列值和会话ID，并获取特权。
CVSS Information
N/A
Vulnerability Type
N/A