Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in admin.php in eTicket 1.5.5.2 allows remote attackers to change the administrative password and possibly perform other administrative tasks. NOTE: either the old password must be known, or the attacker must leverage a separate SQL injection vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eTicket Multiple Scripts 'admin.php'多个输入验证漏洞
Vulnerability Description
eTicket 1.5.5.2的admin.PHP中存在跨站请求伪造漏洞。远程攻击者可以通过修改管理密码，执行其他管理操作。注意：远程攻击者可能会识破旧密码也可能会传播一个独立的SQL注入漏洞。
CVSS Information
N/A
Vulnerability Type
N/A