| Название | 1024-lab smart-admin 3.30.0 Exposure of Sensitive System Information to an Unauthorized Cont |
|---|
| Описание | In the "smart-admin" demo site,The developers failed to implement strict access control, allowing users to directly access the Druid page.Attackers can gain unauthorized access to all SQL statements and sessions in the system. After obtaining the session, they can log into the system backend and expand the damage.
|
|---|
| Источник | ⚠️ https://github.com/1024-lab/smart-admin/issues/117 |
|---|
| Пользователь | renyu (UID 97219) |
|---|
| Представление | 14.04.2026 09:25 (2 месяцы назад) |
|---|
| Модерация | 29.04.2026 21:17 (15 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 360204 [1024-lab smart-admin до 3.30.0 Demo Site index.html эскалация привилегий] |
|---|
| Баллы | 18 |
|---|