Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication bypass via repeated parameters
Vulnerability Description
A flaw, similar to to CVE-2016-9646, exists in ikiwiki before 3.20170111, in the passwordauth plugin's use of CGI::FormBuilder, allowing an attacker to bypass authentication via repeated parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ikiwiki 安全漏洞
Vulnerability Description
ikiwiki是软件开发者Joey和其他贡献者共同开发的一款wiki编译器,它支持将wiki页面转换为网站发布的HTML页面。passwordauth plugin是其中的一个密码认证插件。 ikiwiki 3.20170111之前版本中passwordauth插件对CGI::FormBuilder的使用存在安全漏洞。攻击者可借助利用该漏洞绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A