漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mafia Blog 管理员身份验证绕过漏洞
Vulnerability Description
Mafia Blog .4 BETA并不能正确保护admin目录,从而允许远程攻击者通过使用writeinfo.php以将代码注入到info.php来执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A