通天星 CMSV6 UserSessionAction_saveUserSession session伪造漏洞

2024-08-05 通天星CMSV6 PoC No

Description

通天星CMSV6存在session伪造漏洞，该漏洞是由于UserSessionAction_saveUserSession接口对用户的权限校验不当导致的。

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

https://github.com/adysec/POC/blob/main/wpoc/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md
https://github.com/Sec-Fork/POC-20250106/blob/main/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md
https://gitea.com/Run0nceEx/POC/src/branch/main/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md
https://github.com/oLy0/Vulnerability/blob/main/wpoc/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md
https://github.com/admin772/POC/blob/main/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md
https://github.com/plbplbp/loudong001/blob/main/%E9%80%9A%E5%A4%A9%E6%98%9F/%E9%80%9A%E5%A4%A9%E6%98%9FCMSV6%E8%BD%A6%E8%BD%BD%E8%A7%86%E9%A2%91%E7%9B%91%E6%8E%A7%E5%B9%B3%E5%8F%B0SESSION%E4%BC%AA%E9%80%A0%E6%BC%8F%E6%B4%9E.md

Description

PoC

References

Related Vulnerabilities