Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote attackers to conduct phishing attacks without detection by the victim.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SilverStripe ‘MemberLoginForm.php’信息泄露漏洞
Vulnerability Description
SilverStripe CMS是新西兰SilverStripe公司的一套开源的编程框架和内容管理系统 (CMS)。该系统具有支持多国语言、跨平台等特点。 SilverStripe 3.0.3版本中的security/MemberLoginForm.php脚本中存在安全漏洞，该漏洞源于程序支持登录使用GET请求。远程攻击者可利用该漏洞实施钓鱼攻击。
CVSS Information
N/A
Vulnerability Type
N/A