Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
haut.php in PEEL 1.0b allows remote attackers to execute arbitrary PHP code by modifying the dirroot parameter to reference a URL on a remote web server that contains the code in a lang.php file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PEEL远程文件包含漏洞
Vulnerability Description
PEEL是一款PHP编写的目录管理工具。 haut.php脚本对用户提交的参数缺少正确检查，远程攻击者可以利用这个漏洞指定远程服务器上任意文件为包含文件，以WEB权限执行包含文件中的代码。 modeles/haut.php没有正确处理$dirroot参数的内容，远程攻击者可以在自己控制的服务器上构建任意PHP文件，提交包含远程服务器文件的参数数据的请求，可导致包含文件的代码以WEB权限在系统上执行。
CVSS Information
N/A
Vulnerability Type
N/A