提交 #705601: Shenzhen Sixun Software Co., Ltd. Sissyun Shanghui 7 Online Business System 4.10.24.3 Unauthorized信息

标题Shenzhen Sixun Software Co., Ltd. Sissyun Shanghui 7 Online Business System 4.10.24.3 Unauthorized
描述Sissyun Shanghui 7 Online Business System has a user password reset vulnerability, allowing attackers to enumerate usernames and modify the password of any user. https://github.com/zhangbuneng/Sissyun-Shanghui-7-Unauthorized-password-modificationfication-vulnerability./issues/1#issue-3688839620
来源⚠️ https://github.com/zhangbuneng/Sissyun-Shanghui-7-Unauthorized-password-modificationfication-vulnerability./issues/1#issue-3688839620
用户
 yaozhangYiqiyin (UID 81367)
提交2025-12-03 08時22分 (11 月前)
管理2025-12-14 13時22分 (11 days later)
状态已接受
VulDB条目336414 [Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3 UpdatePasswordBatch 权限提升]
积分17

Do you want to use VulDB in your project?

Use the official API to access entries easily!