票友 ERP 管理系统 <=10.5.6 Ajax/users.ashx 未授权访问

Follow 0

Basic Fields

SSV ID:: SSV-90210

Find Time:: 2016-01-06

Submit Time:: 2016-01-06

Level:

Category:: 越权访问

Component:: (<=10.5.6)

Author:: Unknown

Submitter:: Knownsec

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Login to see

Detail

Contributor Knownsec Got 0.5KB

Login to see

have 1 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor sherwel totally have 0KB

Login to see

have 0 Exchange

Reference Linking

Login to see

Solutions

Login to see

anonymous 兑换漏洞详情

Timeline

2016-01-06 发现/披露了漏洞
Knownsec

2016-01-06 提交了漏洞
Knownsec

2016-01-07 提交补充了漏洞详情
sherwel

2016-01-07 提交更新了 PoC

Related Vuls

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes