| عنوان | https://github.com/zhanghuanhao/LibrarySystem LibrarySystem v1.1.1 Improper Access Control |
|---|
| الوصف | The library management system has an unauthorized access vulnerability, allowing unauthorized access to the administrator's backend.Attackers can access the management backend without logging in and perform CRUD operations on the system.Accessing /admin_books.html without logging in successfully logs into the management system, allowing users to perform CRUD operations. |
|---|
| المصدر | ⚠️ https://github.com/zhanghuanhao/LibrarySystem/issues/32 |
|---|
| المستخدم | Jszdk (UID 95030) |
|---|
| ارسال | 31/01/2026 06:37 PM (3 أشهر منذ) |
|---|
| الاعتدال | 15/02/2026 05:06 PM (15 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 346158 [zhanghuanhao LibrarySystem 图书馆管理系统 حتى 1.1.1 BookController.java تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|