Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple PHP remote file inclusion vulnerabilities in ttCMS 2.2 and ttForum allow remote attackers to execute arbitrary PHP code via the (1) template parameter in News.php or (2) installdir parameter in install.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ttCMS / ttForum远程文件包含漏洞
Vulnerability Description
ttCMS/ttForum是两款基于WEB的论坛程序。 ttCMS/ttForum包含的多个脚本对用户提供的输入缺少正确过滤，远程攻击者可以利用这个漏洞以WEB权限在系统上执行任意命令。 ttCMS/ttForum包含的modules/forum/News.php脚本包含如下代码： include($template . '.' . $ext); 此变量用于从用户输入中直接获得包含文件，由于没有进行初始化，因此可以通过全局注入来进行变量定义，攻击者可以指定远程系统中的PHP文件作为参数提交给$templa
CVSS Information
N/A
Vulnerability Type
N/A