Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attackers to execute arbitrary PHP by using the FileUpload command to upload a file that appears to be an image but contains PHP script.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DoceboLMS任意文件上传漏洞
Vulnerability Description
DoceboLMS 2.0.4的fckeditor2rc2加载项中的connector.php存在任意文件上传漏洞,远程攻击者可以使用FileUpload命令上传看似图像但包含PHP脚本的文件,以此来执行任意PHP。
CVSS Information
N/A
Vulnerability Type
N/A