Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpGB远程拒绝服务攻击漏洞
Vulnerability Description
phpGB是一款基于PHP/MYSQL的留言本系统，可使用在Linux和其他多种Unix操作系统下。 phpGB中savesettings.php脚本访问验证缺少正确检查，远程攻击者可以利用这个漏洞绕过验证进行拒绝服务攻击。 phpGB中的savesettings.php对通过POST提交的页面请求只进行了验证操作，而这个验证机制相当简单，攻击者可以伪造验证写任意数据到/include/config.php脚本，由于config.php脚本在每个页面都被调用，所以一个语法错误可导致整个留言本产生拒绝服务攻
CVSS Information
N/A
Vulnerability Type
N/A