Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
merchants/index.php in Post Affiliate Pro 2.0.4 and earlier, with magic_quotes_gpc disabled, allows remote attackers to include arbitrary local files via the md parameter, possibly due to a directory traversal vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Post Affiliate Pro index.php可能的目录遍历漏洞
Vulnerability Description
Post Affiliate Pro是一款功能强大的联合管理系统。 Post Affiliate Pro 2.0.4及更早版本中的merchants/index.php，在禁用magic_quotes_gpc时，可让远程攻击者通过md参数包含任意本地文件，这可能是由于目录遍历漏洞导致的。
CVSS Information
N/A
Vulnerability Type
N/A