Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenBMCS Cross Site Request Forgery (CSRF) via sendFeedback.php
Vulnerability Description
OpenBMCS 2.4 contains a CSRF vulnerability that allows attackers to perform actions with administrative privileges by exploiting the sendFeedback.php endpoint. Attackers can submit malicious requests to trigger unintended actions, such as sending emails or modifying system settings.
CVSS Information
N/A
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
OpenBMCS 跨站请求伪造漏洞
Vulnerability Description
OpenBMCS是澳大利亚OpenBMCS公司的一个建筑管理和控制系统。 OpenBMCS 2.4版本存在跨站请求伪造漏洞，该漏洞源于sendFeedback.php端点存在跨站请求伪造问题，可能导致执行管理员操作。
CVSS Information
N/A
Vulnerability Type
N/A