Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequences and "%00" (trailing null byte) in the u parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PBLang SetCookie.PHP目录遍历漏洞
Vulnerability Description
PBLang是一个基于PHP支持国际化的BBS系统。它不需要任何数据库,数据全部存储在文件系统中。 PBLang 4.65以及之前较早版本的setcookie.php中含有目录遍历漏洞,远程攻击者可以通过U参数中的".."(参数中包含'..')序列和"%00"(空字节后缀)来读取任意的文件。
CVSS Information
N/A
Vulnerability Type
N/A