Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BACKCLICK 授权问题漏洞
Vulnerability Description
BACKCLICK是德国BACKCLICK公司的一种营销软件,可帮助组织创建、实施、评估和运行基于 web 的电子邮件活动。 BACKCLICK 5.9.63版本存在安全漏洞,该漏洞源于会话跟踪的不安全实现,攻击者利用该漏洞会诱骗用户打开经过身份验证的用户会话,以获取已知的会话标识符,即会话固定。
CVSS Information
N/A
Vulnerability Type
N/A