Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ContentKeeper 帐号口令信息泄露漏洞
Vulnerability Description
ContentKeeper是一款先进的Internet内容过滤器，允许组织监控和管理对Internet资源的访问。 ContentKeeper在保存处理用户的口令时存在漏洞，远程攻击者可能利用此漏洞非授权获取帐号信息。 管理员可以通过浏览器管理ContentKeeper的前端。由于ContentKeeper没有哈希加密已有的用户口令，因此用户可以通过请求管理页面导致将每个帐号的明文口令注入到FORM元素的口令输入框中并返回给客户端。
CVSS Information
N/A
Vulnerability Type
N/A