Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via the username (u parameter), which is directly injected into a file that is later executed upon login.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PBLang setcookie.php 静态代码注入漏洞
Vulnerability Description
PBLang是一个基于PHP支持国际化的BBS系统。它不需要任何数据库，数据全部存储在文件系统中。 PBLang 4.65以及可能之前较早的版本在setcookie.php中存在Direct静态代码注入漏洞。远程攻击者可以通过用户名(u参数)执行任意PHP代码，代码直接注入到稍后登录时执行的文件中。
CVSS Information
N/A
Vulnerability Type
N/A