Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request for the admin/ URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IFDate Administrative 'admin/URI' 身份认证绕过漏洞
Vulnerability Description
当管理证书丢失时,ifdate 2.x版本会在不退出的情况下发送一个重定向到web浏览器,远程攻击者可以借助一个对admin/URI的直接请求,获得管理访问权限。
CVSS Information
N/A
Vulnerability Type
N/A