Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backend_menu.php, (3) clock_menu.php, (4) counter_menu.php, (5) login_menu.php, and other files, which reveal the full path in a PHP error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
e107 Website System多个安全漏洞
Vulnerability Description
e107 Website系统是一款网站构架/内容管理系统。 e107 Website系统存在多个输入验证错误问题,远程攻击者可以利用这些漏洞获得敏感信息或更改数据库信息。 由于没有对用户提交的URI数据缺少充分过滤,攻击者可以进行路径泄露,跨站脚本执行,文件包含,SQL注入等攻击,导致敏感信息泄露,或直接修改数据库数据。
CVSS Information
N/A
Vulnerability Type
N/A