Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mambo globals.php远程文件包含漏洞
Vulnerability Description
Mambo是功能强大的免费开放源码内容管理系统。 如果关闭了register_globals的话，则Mambo的globals.php中存在远程文件包含漏洞，成功利用这个漏洞的攻击者可以以Web server进程的权限执行任意远程PHP代码。 在globals.php中： if (!ini_get('register_globals')) { while(list($key，$value)=each($_FILES)) $GLOBALS[$key]=$value; while(list($key，$val
CVSS Information
N/A
Vulnerability Type
N/A