Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A mass assignment vulnerability in eyecomms eyeCMS through 2019-10-15 allows any candidate to take over another candidate's account (by also exploiting CVE-2019-17604) via a modified candidate id and an additional password parameter. The outcome is that the password of this other candidate is changed.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eyecomms eyeCMS 安全漏洞
Vulnerability Description
eyecomms eyeCMS是阿曼eyecomms公司的一套内容管理系统(CMS)。 eyecomms eyeCMS 2019-10-15及之前版本中存在安全漏洞。攻击者可利用该漏洞控制其他用户账户。
CVSS Information
N/A
Vulnerability Type
N/A