Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive information by reading this cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
POSH‘remember me’信息泄露漏洞
Vulnerability Description
POSH（又名Posh portal或Portaneo）是一套开源的基于PHP且可定制的社交小部件门户系统。 POSH 3.3.0及之前的版本中的portal/scr_authentif.php脚本中的remember me功能存在信息泄露漏洞，该漏洞源于cookie中以明文方式存储用户名和密码的MD3摘要。远程攻击者可通过读取cookie利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A