Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP Nuke复制和删除文件漏洞
Vulnerability Description
PHP-Nuke 5.2版本存在漏洞。远程攻击者可以通过像调用一个参数一样调用带有admin.php的case.filemanager.php复制并删除任意文件，该漏洞将会设置$PHP_SELF变量并且在admin.php而不是用户调用case.filemanager.php时使它出现。
CVSS Information
N/A
Vulnerability Type
N/A