Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administrative activities, which allows remote attackers to (1) reinstall the application via a direct request for install/index.php; (2) delete the database via a do=delete_database QUERY_STRING to a renamed copy of install/index.php; or access the administration system, after guessing a filename, via a direct request for a file in (3) admin/ or (4) tech/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Headstart Solutions DeskPRO 文件管理权限漏洞
Vulnerability Description
Headstart Solutions DeskPRO没有要求对与管理活动相关的某些文件和目录的管理权,这会允许远程攻击者可以借助一个对install/index.php的直接请求，(1)重新安装应用程序的直接请求；(2)可以借助对install/index.php的一个重命名的复制的do=delete_database QUERY_STRING，删除任意数据库；或可以借助对(3)admin/或(4)tech/的文件的一个直接请求，在猜出一个文件名后访问管理系统。
CVSS Information
N/A
Vulnerability Type
N/A