Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users and cause a denial of service (resource consumption) via a large number of requests to register.php. NOTE: the vendor has disputed this vulnerability, stating "If you have the CAPTCHA enabled then the registrations wont even go through. ... if you are talking about the flood being allowed in the first place then surely this is something that should be handled at the server level.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jelsoft vBulletin 'register.php'拒绝服务攻击漏洞
Vulnerability Description
**有争议** Jelsoft vBulletin 3.5.4中，远程攻击者可借助对register.php脚本的大量请求来注册多个任意用户，并触发拒绝服务攻击(资源消耗型)。注：厂商对此漏洞存在争议，声称"如果启用了CAPTCHA，注册就不会通过......... 如果你们谈论的是存在泛洪攻击，那么这理应是服务器级要解决的问题。"
CVSS Information
N/A
Vulnerability Type
N/A