提交 #434801: TOTOLINK LR350 V9.3.5u.6369 Authorization Bypass
| 标题 | TOTOLINK LR350 V9.3.5u.6369 Authorization Bypass |
|---|---|
| 描述 | The TOTOLINK LR350 allows attackers to bypass login through the Form_Login function. By manipulating the authCode and goURL parameters, attackers can bypass authentication and access the home page. |
| 来源 | ⚠️ https:/ |
| 用户 | c0nyy (UID 76911) |
| 提交 | 2024-10-31 05時02分 (2 年前) |
| 管理 | 2024-11-01 06時59分 (1 day later) |
| 状态 | 已接受 |
| VulDB条目 | 282667 [TOTOLINK LR350 直到 9.3.5u.6369 /formLoginAuth.htm authCode 权限提升] |
| 积分 | 17 |