Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to bypass access restrictions related to "persistent login," probably due to the generation of predictable cookies based on the IP address and User agent in userslib.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TikiWiki CMS/Groupware 'Standard Remember'访问控制绕过漏洞
Vulnerability Description
TikiWiki是一款网站内容管理系统，基于PHP+ADOdb+Smarty等技术构建。 TikiWiki CMS/Groupware的Standard Remember方法存在访问控制绕过漏洞。由于缺乏对脚本userslib.php中的IP地址和User代理的充分过滤，远程攻击者可以借助此漏洞绕过与"持续登录"相关的访问控制。
CVSS Information
N/A
Vulnerability Type
N/A