Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPBB album_portal.php远程文件包含漏洞
Vulnerability Description
phpBB是一款由PHP编写的WEB论坛应用程序,支持多种数据库系统,可使用在多种Unix和Linux操作系统下。 phpBB包含的album_portal.php脚本对用户提交URI参数缺少充分过滤,远程攻击者利用这个漏洞以WEB进程权限执行任意命令。 album_portal.php脚本在处理"album_root_path"参数时缺少充分过滤,攻击者提交远程服务上的恶意文件作为这个参数的包含文件,可导致以WEB进程权限执行恶意文件中的任意代码。
CVSS Information
N/A
Vulnerability Type
N/A