Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the emgb_admin_path parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
EternalMart多个文件包含漏洞
Vulnerability Description
EternalMart包含邮件列表管理和客户留言本系统。 EternalMart没有正确处理用户提交的请求，远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行任意命令。 EternalMart邮件管理程序对用户提交的$emml_path变量缺少充分过滤，可导致远程攻击者提交恶意数据给$emml_path，包含攻击者指定的远程服务器上文件，以WEB权限在系统内执行任意PHP代码。 另外EternalMart客户留言系统上对$emgb_admin_path变量也缺少过滤，同样存在上述问题。
CVSS Information
N/A
Vulnerability Type
N/A