Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SysJust CTS Web - Broken Authentication
Vulnerability Description
The CTS Web transaction system related to authentication management is implemented incorrectly. After login, remote attackers can manipulate cookies to access other accounts and trade in the stock market with spoofed identity.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
认证机制不恰当
Vulnerability Title
嘉实资讯 CTS Web transaction system 授权问题漏洞
Vulnerability Description
嘉实资讯 CTS Web transaction system是台湾嘉实资讯公司的一款CTS Web 交易系統。 CTS Web transaction system 存在授权问题漏洞，该漏洞源于事务系统的认证相关的功能实现不正确。远程攻击者可利用该漏洞在登陆后操纵cookie访问其他账户，并以欺骗身份在股市交易。
CVSS Information
N/A
Vulnerability Type
N/A