Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php. NOTE: if a PHPKit administrator must already have access to the end system to install or modify configuration of the product, then this issue might not cross privilege boundaries, and should not be included in CVE.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPKit 'admin/admin.php' 无限制文件上传漏洞
Vulnerability Description
PHPKit 1.6.1中的admin/admin.php页面存在无限制文件上传漏洞。这使得远程认证管理员可以通过上传.php文件到content/images/目录(利用images.php)来执行任意PHP代码。注：如果PHPKit管理员必须访问终端系统以安装或修改产品的配置，此问题可能不能越过权限界限。
CVSS Information
N/A
Vulnerability Type
N/A