Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting view_caricatier.php, and then requesting any file in the admin directory with a cookie_username=admin argument.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
AL-Caricatier SS.PHP认证绕过漏洞
Vulnerability Description
AL-Caricatier 2.5及更早版本中的ss.php存在未明漏洞,远程攻击者可通过请求view_caricatier.php,再请求管理员路径中任意带有cookie_username=admin参数的文件,从而绕过登录认证。
CVSS Information
N/A
Vulnerability Type
N/A