8 matches found
CVE-2024-11318
CVE-2024-11318 IDOR - AbsysNet 2.3.1 用户劫持 免责声明 此工具旨在帮助识别和利用特定CVE-2024-11318漏洞的应用程序是否易受攻击。它适用于网络安全专业人员、研究人员和渗透测试人员，在获得明确授权的情况下评估环境的安全性。 如果确认存在漏洞，仅当您拥有应用程序或系统所有者的适当授权时，才能进行利用。 未经授权使用此工具针对您不拥有或未经明确许可测试的系统或网络是非法且不道德的。作者对此工具造成的任何滥用或损害不承担任何责任。 使用此工具即表示您同意遵守所有相关法律和道德标准。在测试或利用漏洞之前，请始终确保您拥有明确许可。 描述 该漏洞影响...
CVE-2024-11318
An IDOR Insecure Direct Object Reference vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint...
CVE-2024-11318
CVE-2024-11318 describes an IDOR vulnerability in AbsysNet v2.3.1 where a remote attacker can obtain an active user’s session by brute-forcing the session identifier on the /cgi-bin/ocap/ endpoint. Root cause: insecure direct object reference allowing session hijacking. Impact (per sources): pote...
CVE-2024-11318 IDOR vulnerability in AbsysNet
An IDOR Insecure Direct Object Reference vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint...
CVE-2024-11318 IDOR vulnerability in AbsysNet
An IDOR Insecure Direct Object Reference vulnerability has been discovered in AbsysNet, affecting version 2.3.1. This vulnerability could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifier on the "/cgi-bin/ocap/" endpoint...
AbsysNET 安全漏洞
AbsysNET is an open source library online management system from Library Technology Guides. A security vulnerability exists in AbsysNet version 2.3.1, which stems from an insecure direct object reference that allows an attacker to obtain an unauthenticated user session by brute-force attacking th...
PT-2024-9175 · Absysnet · Absysnet
Name of the Vulnerable Software and Affected Versions: AbsysNet version 2.3.1 Description: An IDOR Insecure Direct Object Reference vulnerability has been discovered, which could allow a remote attacker to obtain the session of an unauthenticated user by brute-force attacking the session identifi...
