| عنوان | OTCMS contains a weak default password which gives attackers to access backstage management system |
|---|
| الوصف | OTCMS contains a weak default password which gives attackers to access backstage management system. It has been declared as problematic. OTCMS contains a weak default password which gives attackers to access backstage management system. The default account password is admin/admin. The problem lies in the pic_save function in sys/apps/controllers/admin/Comic.php, which is utilized to cause ssrf by controlling $pic.
|
|---|
| المستخدم | p0ison (UID 37575) |
|---|
| ارسال | 06/06/2023 08:35 AM (3 سنوات منذ) |
|---|
| الاعتدال | 14/06/2023 08:13 AM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 231508 [OTCMS حتى 6.62 username/password توثيق ضعيف] |
|---|
| النقاط | 20 |
|---|