Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote authenticated users to bypass intended access restrictions and modify administrative credentials via unspecified vectors, a different vulnerability than CVE-2015-2953 and CVE-2015-2958.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Igreks MilkyStep Light和Professional 安全漏洞
Vulnerability Description
Igreks MilkyStep是日本Igreks公司的一个通过电子邮件系统进行杂志推送的CGI。MilkyStep Light和MilkyStep Professional分别是轻量级版本和专业级版本。 Igreks MilkyStep Light 0.94及之前版本和Professional 1.82及之前版本中的user-information管理功能存在安全漏洞。远程攻击者可利用该漏洞绕过既定的访问限制，修改管理员证书。
CVSS Information
N/A
Vulnerability Type
N/A