漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
FreshDNS version 1.0.3 and earlier contains a Cross ite Request Forgery (CSRF) vulnerability in All (authenticated) API calls in index.php / class.manager.php that can result in Editing domains and zones with victim's privileges. This attack appear to be exploitable via Victim must open a website containing attacker's javascript. This vulnerability appears to have been fixed in 1.0.5 and later.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreshDNS 跨站请求伪造漏洞
Vulnerability Description
FreshDNS是一款基于FreshDNS AJAX的PowerDNS（域名服务器）管理系统。 FreshDNS 1.0.3及之前版本中的index.php/class.manager.php文件的全部已认证的API调用存在跨站请求伪造漏洞。远程攻击者可借助JavaScript代码利用该漏洞执行未授权的操作。
CVSS Information
N/A
Vulnerability Type
N/A