An issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute force attacks.
cpe:2.3:a:chshcms:cscms:4.0:*:*:*:*:*:*:*
1322E111-92FB-4A3C-9CCC-60007621AA49
OR
cscmsV4.0-4.1 demourl:http://demo.chshcms.com/
In the user login box Sign in now without a verification code and prompt that the user does not exist，which makes it easier for remote attackers to hijack accounts via a brute-force approach.

Capture the packet in burp to truncate the current request the current data packet sent to the intruder module, identification "username" used to traverse account information; Select the dictionary for the account name to open the attack

![image](https://user-images.githubusercontent.com/57421706/68908827-6b46c180-0787-11ea-8b60-494915a9953a.png)

Successful login account
![image](https://user-images.githubusercontent.com/57421706/68908860-831e4580-0787-11ea-9ab4-4b391ed5fbd7.png)

This is a prompt password error
![image](https://user-images.githubusercontent.com/57421706/68908984-d42e3980-0787-11ea-928b-07ba5cd1cd0f.png)
This is the prompt that the account does not exist.
![image](https://user-images.githubusercontent.com/57421706/68909051-063f9b80-0788-11ea-88ef-81eae7111a5f.png)




cscms demourl:http://demo.chshcms.com/ login have UserTraversal-Vulnerability
This is a GitHub Issue
repo:cscms
owner:chshcms
Title : cscms demourl:http://demo.chshcms.com/ login have UserTraversal-Vulnerability
Issue date:

--- start body ---
cscmsV4.0-4.1 demourl:http://demo.chshcms.com/
In the user login box Sign in now without a verification code and prompt that the user does not exist，which makes it easier for remote attackers to hijack accounts via a brute-force approach.

Capture the packet in burp to truncate the current request the current data packet sent to the intruder module, identification "username" used to traverse account information; Select the dictionary for the account name to open the attack

![image](https://user-images.githubusercontent.com/57421706/68908827-6b46c180-0787-11ea-8b60-494915a9953a.png)

Successful login account
![image](https://user-images.githubusercontent.com/57421706/68908860-831e4580-0787-11ea-9ab4-4b391ed5fbd7.png)

This is a prompt password error
![image](https://user-images.githubusercontent.com/57421706/68908984-d42e3980-0787-11ea-928b-07ba5cd1cd0f.png)
This is the prompt that the account does not exist.
![image](https://user-images.githubusercontent.com/57421706/68909051-063f9b80-0788-11ea-88ef-81eae7111a5f.png)




--- end body ---

comments :
--- start comments ---

--- end comments ---