Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random values inside it. If an attacker can discover a session cookie owned by an admin, then it is possible to brute force it with O(n)=2n instead of O(n)=n^x complexity, and steal the admin password.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Total.js CMS 安全漏洞
Vulnerability Description
Total.js CMS是一套基于NoSQL数据库的内容管理系统（CMS）。 Total.js CMS 12.0.0版本中存在安全漏洞。攻击者可利用该漏洞实施暴力破解攻击，窃取admin密码。
CVSS Information
N/A
Vulnerability Type
N/A