Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended access restrictions and assign administrative privileges to themselves via a crafted request to signup.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenDocMan 安全漏洞
Vulnerability Description
OpenDocMan是OpenDocMan项目组所开发的一套开源的基于Web的PHP文档管理系统（DMS）。该系统主要用于集中管理文档，并具有易于安装、使用、可扩展等特点。 OpenDocMan 1.2.7及之前版本中存在安全漏洞，该漏洞源于程序没有正确的校验被允许的操作。远程攻击者可通过向signup.php文件发送特制的请求利用该漏洞绕过访问限制并将管理权限分配给攻击者自己。
CVSS Information
N/A
Vulnerability Type
N/A