Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp page, they can be registered with the super administrators GroupID directly.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ASP4CMS AspCMS 安全漏洞
Vulnerability Description
ASP4CMS AspCMS是中国ASP4CMS开源实验室的一套免费的企业网站建设系统。该系统支持自定义模板和插件扩展等功能。 ASP4CMS AspCMS 2.5.6版本中存在安全漏洞，该漏洞源于在/member/reg.asp页面的‘addUser’函数中注册普通用户时用户可直接注册成超级管理员。攻击者可利用该漏洞提升权限。
CVSS Information
N/A
Vulnerability Type
N/A