Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X7 Chat 跨站请求伪造漏洞
Vulnerability Description
X7 Chat是一款基于PHP的在线聊天程序。 X7 Chat 2.0.5.1和较早版本中存在跨站请求伪造漏洞。远程攻击者利用该漏洞通过adminpanel操作中的用户页面传送到index.php脚本,劫持管理员身份验证添加任意用户到组的请求。
CVSS Information
N/A
Vulnerability Type
N/A