Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
cp/profile.php in VivaPrograms Infinity 2.0.5 and earlier does not require administrative authentication for the donewauthor action, which allows remote attackers to create administrative accounts via the name, password, and conf_password parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
VivaPrograms Infinity_脚本"cp/profile.php" 权限许可和访问控制漏洞
Vulnerability Description
VivaPrograms Infinity 2.0.5及之前版本中的cp/profile.php没有对donewauthor行为进行管理身份认证，这使得远程攻击者可以借助名字、密码和conf_password参数，创建管理员账户。
CVSS Information
N/A
Vulnerability Type
N/A