Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows remote attackers to read and modify the classes/vars.php and classes/varstuff.php configuration files via direct requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Stephen Craton Chatness 'admin/options.php' 权限许可和访问控制漏洞
Vulnerability Description
Stephen Craton (又称WiredPHP) Chatness的admin/options.php没有检查管理证书，存在权限许可和访问控制漏洞。远程攻击者可以借助直接请求，读取和修改classes/vars.php和classes/varstuff.php配置文件。
CVSS Information
N/A
Vulnerability Type
N/A