Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_page, (3) g_css_include_file, (4) g_meta_include_file, or (5) a cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mantis配置远程文件包含命令执行漏洞
Vulnerability Description
mantis是一款基于WEB的PHP编写MySQL后台支持的漏洞跟踪系统。 mantis在包含某些配置文件时对用户的输入缺少检查，远程攻击者可以利用这个漏洞包含远程服务器上的文件以WEB进程权限执行任意命令或者查看任意文件。 Mantis允许用户自己配置在页面顶端和底部的包含的文件，以及包含CSS样式表和meta标记的文件。这些文件的路径在default/config_inc2.php中通过如下变量： $g_bottom_include_page， $g_top_include_page， $g_css_
CVSS Information
N/A
Vulnerability Type
N/A