8000 存在帳號枚舉 · Issue #7 · cooltey/C.P.Sub · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
存在帳號枚舉 #7
New issue
New issue
Open
Open
存在帳號枚舉#7
@Frank-Kam

Description

@Frank-Kam
Frank-Kam
opened on Feb 4, 2025

在底下路徑中，存在路徑枚舉:

https://cooltey.org/cpsub/login.php

OWASP 參考資料
CWE-204 參考資料

輸入正確的帳號但密碼錯誤的情況下，會返回密碼錯誤，而這形成了帳號枚舉

Image

Patch:

修改/class/auth.php中的錯誤文字為 - 帳號或密碼錯誤

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions
      0