Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Hot or Not Clone has insufficient access control for producing and reading database backups, which allows remote attackers to obtain the administrator username and password via a direct request to control/backup/backup.php, which generates a backup/dump/backup.sql file that can be downloaded via a direct request to control/downloadfile.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hotscripts Hot_or_Not_Clone control/backup/backup.php 权限许可和访问控制漏洞
Vulnerability Description
Hot or Not Clone 对制造和读取数据备份不能充分控制，远程攻击者可以借助一个直接请求控制备份backup.php并导致backup/dump/backup.sql可以被下载，以此远程攻击者可以获得管理员的用户名和密码。
CVSS Information
N/A
Vulnerability Type
N/A