Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Teraway LiveHelp 2.0 allows remote attackers to bypass authentication and gain administrative access via a pwd=&lvl=1&usr=&alias=admin&userid=1 value for the TWLHadmin cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Teraway LinkTracker TWLHadmin cookie Cookie认证绕过漏洞
Vulnerability Description
Teraway LinkTracker是一个网站链接跟踪管理系统，可以通过链接开启和关闭网站，可以对网站链接点击进行分类统计等功能。 Teraway LiveHelp 2.0 allows 远程攻击者可以借助对TWLHadmin cookie的一个 pwd=&lvl=1&usr=&alias=admin&userid=1值，绕过权限并获得管理访问权。
CVSS Information
N/A
Vulnerability Type
N/A