Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DamiCMS跨站请求伪造漏洞
Vulnerability Description
DamiCMS是一套用于快速搭建网站的内容管理系统(CMS)。 DamiCMS v6.0版本存在跨站请求伪造漏洞,该漏洞源于/damicms-master/admin.php?s=/Article/doedit 缺少对于cookie的保护,允许攻击者通过获取用户的会话 cookie 来破坏和冒充用户帐户。
CVSS Information
N/A
Vulnerability Type
N/A