Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sahana disaster management system 0.6.2.2, and possibly other versions, allows remote attackers to bypass intended access restrictions and disable administrator authentication via a direct request to stream.php in an acl_enable_acl action to the admin module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sahanafoundation Sahana灾难管理系统脚本'stream.php'安全认证绕过漏洞
Vulnerability Description
Sahana 灾难管理系统脚本'stream.php'存在安全认证绕过漏洞。远程攻击者通过发送直接请求给管理模块的acl_enable_acl操作中脚本stream.php,绕过已设定的访问限制并使管理员认证失效。
CVSS Information
N/A
Vulnerability Type
N/A