Lost and Found Information System 访问控制错误漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.nsfocus.net/vulndb/81770
• https://cve.imfht.com/detail/CVE-2023-2670
• https://cve.imfht.com/detail/CVE-2023-3018
• https://www.nsfocus.net/index.php?act=sec_bug&type_id=&os=&keyword=&page=3964
• https://cve.imfht.com/detail/CVE-2023-2669
• https://cve.imfht.com/detail/CVE-2023-2672
• https://vulners.com/cve/CVE-2023-2670
• https://cve.imfht.com/vendor/SourceCodester?page=41

Related Vulnerabilities

• 中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞
• 中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞
• PoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information Disclosure
• PoCCVE-2026-3576: Planyo Online Reservation System <= 3.0 - Arbitrary File Read
• PoCCVE-2026-10768: Drupal LocalGov Workflows < 1.6.0 - Information Disclosure
• PoCCVE-2026-27796: Homarr < 1.54.0 - Information Disclosure
• 深信服运维安全管理系统 /fort/system/safeCert;help/upload_safe_cert 命令执行漏洞
• PoCCVE-2026-1980: WPBookit <= 1.0.8 - Unauthenticated Customer Information Disclosure
• PoCCVE-2026-8386: WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure
• PoCzoneminder-system-log: ZoneMinder System Log - Detect
• 用友U8cloud /u8cloud/extsystem/dst SQL 注入漏洞
• 天锐绿盾审批系统 /trwfe/login.jsp/..;/thirdSystemConfig/findSingConfigPage.do SQL 注入漏洞
• 关于U8cloud2.6-5.1sp版本extsystem.dst接口存在SQL注入漏洞的安全公告