| शीर्षक | 60IndexPage 60IndexPage <=v1.8.5 SSRF |
|---|
| विवरण | The 60IndexPage system, specifically in the file /include/file.php, contains a Pre-Authentication Server-Side Request Forgery (SSRF) vulnerability. The flaw resides in the fact that the system accepts a URL parameter and downloads from it without proper validation, thereby allowing an attacker to manipulate the request to read local files or send raw TCP packets. This vulnerability, which affects versions up to and including v1.8.5, can be exploited to gain unauthorized access to internal systems or data, posing a significant security risk. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/7F54gy22y7uJ |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 19/01/2024 08:47 AM (3 साल पहले) |
|---|
| संयम | 26/01/2024 01:44 PM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 252189 [60IndexPage तक 1.8.5 Parameter /include/file.php url अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|