Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MFScripts YetiShare 3.5.2 through 4.5.3 does not set the Secure flag on session cookies, allowing the cookie to be sent over cleartext channels.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mellow Fish YetiShare 信息泄露漏洞
Vulnerability Description
Mellow Fish YetiShare是英国Mellow Fish公司的一套基于PHP的文件托管网站系统脚本。 Mellow Fish YetiShare 3.5.2版本至4.5.3版本中存在信息泄露漏洞，该漏洞源于程序没有设置会话cookies上的Secure标记。攻击者可通过嗅探网络利用该漏洞获取cookie信息。
CVSS Information
N/A
Vulnerability Type
N/A