Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPProjekt本地文件可读取漏洞
Vulnerability Description
PHPProjekt是一款免费开放源代码PHP组件程序，由PHPProjekt Development Team开发和维护，可使用在Unix和Linux操作系统下，也可使用在Microsoft Windows操作系统下。 PHPProjekt在处理相关上载函数的变量时存在漏洞，可导致远程攻击者以httpd进程的权限在目标系统上执行任意命令。 系统中部分脚本没有正确检查用户提交给上载函数变量中的数据，或者没有检查它们是否是正常的POST数据，攻击者可提交本地系统上的文件(如/etc/passwd)作为上载函
CVSS Information
N/A
Vulnerability Type
N/A