Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
aflog 1.01 allows remote attackers to bypass authentication and gain administrative access by setting the aflog_auth_a cookie to "A" or "O" in (1) edit_delete.php, (2) edit_cat.php, (3) edit_lock.php, and (4) edit_form.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
aflog Cookie身份认证绕过漏洞
Vulnerability Description
aflog允许远程攻击者通过在edit_delete.php,edit_cat.php,edit_lock.php和edit_form.php中把aflog_auth_a cookie设置成"A"或"O"来绕过身份认证和获得管理访问权限。
CVSS Information
N/A
Vulnerability Type
N/A