Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PostNuke caselist远程模块包含漏洞
Vulnerability Description
PostNuke是一款由PHP-NUKE项目组维护和开发的内容管理系统，由PHP实现，运行在多种Linux和Unix系统下，也可运行在Microsoft Windows操作系统下。 PostNuke的user.php脚本上存在漏洞，远程攻击者可以通过提交包含远程主机上的脚本代码进行攻击。 攻击者可以通过user.php指定模块为包含远程攻击者控制主机下建立的任意文件，导致远程主机上的任意代码将在系统上执行。问题存在于user.php的第107行，用户可以追加任意值到$caselist变量： foreach
CVSS Information
N/A
Vulnerability Type
N/A