Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The "remember me" functionality in login.php in Burden before 1.8.1 allows remote attackers to bypass authentication and gain privileges by setting the burden_user_rememberme cookie to 1.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Burden 身份验证绕过漏洞
Vulnerability Description
Burden是一套基于PHP的全功能任务管理应用程序，它支持添加、编辑、删除任务，并通过颜色区分任务重要级别。 Burden 1.8.1之前的版本中的login.php脚本中的‘remember me’功能中存在安全漏洞。远程攻击者可通过设置burden_user_rememberme cookie为‘1’利用该漏洞绕过身份验证，获取特权。
CVSS Information
N/A
Vulnerability Type
N/A