Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microweber 代码问题漏洞
Vulnerability Description
Microweber是美国Microweber社区的一套可提供拖拽功能的网上商店管理系统。该系统包括添加商品、图片等模块。 Microweber 1.1.18版本存在代码问题漏洞,该漏洞源于session过期不足的影响。当用户更改密码时,当用户更改电子邮件和在任何其他浏览器或设备上的旧会话时,会话不会过期并保持活动状态。
CVSS Information
N/A
Vulnerability Type
N/A