Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the (1) Team, (2) News, or (3) Liens modules.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nuked-Klan远程信息泄露漏洞
Vulnerability Description
Nuked-klan是一款由PHP编写的脚本。 Nuked-klan不正确过滤用户提供的URI参数,远程攻击者可以利用这个漏洞执行部分PHP函数,获得大量系统敏感信息。 由于Nuked-klan对模块'Team'、'News'和'Lien'的请求缺少正确过滤,提交部分PHP函数的请求,如phpinfo可使服务器返回大量系统配置信息。
CVSS Information
N/A
Vulnerability Type
N/A