Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
php_api.php in phpWebNotes 2.0.0 uses the extract function to modify key variables such as $t_path_core, which leads to a PHP file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via the t_path_core parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPWebNotes Api.PHP 远程文件包含漏洞
Vulnerability Description
phpWebNotes是一个根据php.net建模的页面注释系统。它的主要目的是提供在线帮助/doc/使用说明页面。这些Web文档最经常的用途是让用户增加页脚注释。 phpWebNotes 2.0.0版本中的php_api.php文件使用析出函数修改关键变量，如$t_path_core，这导致了PHP文件包含漏洞。远程攻击者可利用该漏洞借助于t_path_core参数执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A