Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the web server) via a crafted cookie value, because unserialize is used to restore filter settings from a cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GOsa 代码问题漏洞
Vulnerability Description
GOsa是一款LDAP管理器。该产品主要用于管理用户和组、应用程序、电话和传真等。 GOsa 2.7.5.2版本中的GOsa_Filter_Settings cookie存在安全漏洞。攻击者可利用该漏洞删除文件。
CVSS Information
N/A
Vulnerability Type
N/A