Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MFScripts YetiShare 3.5.2 through 4.5.3 does not set the HttpOnly flag on session cookies, allowing the cookie to be read by script, which can potentially be used by attackers to obtain the cookie via cross-site scripting.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mellow Fish YetiShare 安全漏洞
Vulnerability Description
Mellow Fish YetiShare是英国Mellow Fish公司的一套基于PHP的文件托管网站系统脚本。 Mellow Fish YetiShare 3.5.2版本至4.5.3版本中存在安全漏洞，该漏洞源于程序没有设置会话cookies上的HttpOnly标记。攻击者可利用该漏洞获取cookie。
CVSS Information
N/A
Vulnerability Type
N/A