Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke index.php包含远程PHP脚本漏洞
Vulnerability Description
PHP-Nuke是一种广告流行的网站创建/维护工具。 PHP-Nuke所带的某个PHP脚本存在一个安全问题，允许远程攻击者在PHP-Nuke运行的服务器上执行任意命令。 PHP-Nuke的index.php脚本有个特性，允许包含远程文件，于是攻击者可以在被包含文件中放入恶意代码等待被执行，进而获取PHP-Nuke所在服务器的本地shell。这个非法本地shell拥有WEB Server进程所拥有的权限。 目前尚不清楚PostNuke是否存在同样的问题。
CVSS Information
N/A
Vulnerability Type
N/A