| タイトル | OTCMS contains a weak default password which gives attackers to access backstage management system |
|---|
| 説明 | OTCMS contains a weak default password which gives attackers to access backstage management system. It has been declared as problematic. OTCMS contains a weak default password which gives attackers to access backstage management system. The default account password is admin/admin. The problem lies in the pic_save function in sys/apps/controllers/admin/Comic.php, which is utilized to cause ssrf by controlling $pic.
|
|---|
| ユーザー | p0ison (UID 37575) |
|---|
| 送信 | 2023年06月06日 08:35 (3 年 ago) |
|---|
| モデレーション | 2023年06月14日 08:13 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 231508 [OTCMS 迄 6.62 username/password 弱い認証] |
|---|
| ポイント | 20 |
|---|