Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP addslahes() 信息泄露漏洞
Vulnerability Description
PHP是应用较广的Web脚本语言。 PHP 4.3.9中的addslashes函数不能正常转义NULL字符，这使得远程攻击者可能读取任意文件。但另一方面，magic_quotes_gpc又提供了对应的保护机制。该漏洞存在激励讨论，可能会在将来出现重大改动。
CVSS Information
N/A
Vulnerability Type
N/A