Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a logout) once a new login occurs. NOTE: this violates the intended Auth/Manager.php authentication behavior but, admittedly, is only relevant if an old session ID is known to an attacker.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Octobercms 代码问题漏洞
Vulnerability Description
Octobercms是美国Octobercms公司的一个基于Php的Cms建站系统。 Octobercms through build 471 存在安全漏洞，该漏洞源于当新的登录发生时，它会重新激活旧的会话ID。
CVSS Information
N/A
Vulnerability Type
N/A