Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MyKtools 'mykdownload.php'本地文件访问控制泄露漏洞
Vulnerability Description
MyKtools 2.4版本的mykdownload.php 没有要求认证管理权限，远程攻击者通过提交一个直接请求并向备份的下载页发送一个未明请求来读取一个数据库备份。
CVSS Information
N/A
Vulnerability Type
N/A