Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Unauthorized Modification Vulnerability
Vulnerability Description
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead to compromise of other user accounts.
CVSS Information
N/A
Vulnerability Type
授权机制不正确
Vulnerability Title
Symphony XTS Web Trader 安全漏洞
Vulnerability Description
Symphony XTS Web Trader是Symphony公司的一个基于 HTML5 的高级交易平台。 Symphony XTS Web Trader 2.0.0.1_P160版本存在安全漏洞，该漏洞源于对API的访问控制不当。远程攻击者利用该漏洞可以通过HTTP请求操纵参数导致其他用户帐户被盗用。
CVSS Information
N/A
Vulnerability Type
N/A