提交 #165196: OTCMS contains a weak default password which gives attackers to access backstage management system
| 标题 | OTCMS contains a weak default password which gives attackers to access backstage management system |
|---|---|
| 描述 | OTCMS contains a weak default password which gives attackers to access backstage management system. It has been declared as problematic. OTCMS contains a weak default password which gives attackers to access backstage management system. The default account password is admin/admin. The problem lies in the pic_save function in sys/apps/controllers/admin/Comic.php, which is utilized to cause ssrf by controlling $pic. |
| 用户 | p0ison (UID 37575) |
| 提交 | 2023-06-06 08時35分 (3 年前) |
| 管理 | 2023-06-14 08時13分 (8 days later) |
| 状态 | 已接受 |
| VulDB条目 | 231508 [OTCMS 直到 6.62 username/password 弱身份验证] |
| 积分 | 20 |