Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dynamic Guestbook远程执行任意命令漏洞
Vulnerability Description
Dynamic Guestbook是一款基于WEB的客户留言版程序,可使用在Linux,Unix或者Microsoft Windows操作系统下。 Dynamic Guestbook在处理用户提交的内容上过滤不充分,可导致远程攻击者可以以httpd进程的权限执行任意代码。 Dynamic Guestbook没有在任意表单域充分检查用户输入的内容,如PHP代码等,攻击者可插入任意PHP代码到表单,导致攻击者以Guestbook进程的权限在目标系统上执行任意代码。 问题存在与如下代码中: ##########
CVSS Information
N/A
Vulnerability Type
N/A