Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) menu.inc.php, (2) datasets.php and (3) mass_operations.inc.php (mistakenly referred to as mass_opeations.inc.php) scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server that contains the code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
N/X Web内容管理系统远程文件包含漏洞
Vulnerability Description
N/X Web Content Management System是一款方便建立和维护站点的系统。 N/X Web CMS多个脚本对用户提交的参数数据缺少正确过滤，远程攻击者可以利用这个漏洞提恶意WEB请求而以WEB权限在系统上执行任意命令。 CMS包含的'nx/common/cds/menu.inc.php'和'nx/common/dbo/datasets.php'脚本对用户提交的'c_path'参数缺少正确检查，攻击者可以在自己控制的服务器上提供恶意文件，并提交指向恶意文件的路径作为'c_path'参
CVSS Information
N/A
Vulnerability Type
N/A