Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
A-Form 多个产品跨站脚本攻击漏洞和安全绕过漏洞
Vulnerability Description
多个A-Form产品中存在跨站脚本攻击漏洞和安全绕过漏洞。攻击者可利用跨站脚本攻击漏洞在受影响站点上下文受信任用户浏览器中执行任意脚本代码,并窃取基于cookie的认证证书,还可利用安全绕过漏洞绕过某些安全限制并且执行非法操作,或其他攻击。
CVSS Information
N/A
Vulnerability Type
N/A