漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eFiction多个远程输入验证漏洞
Vulnerability Description
eFiction是一款基于Web的远程协同写作的工具。 eFiction处理用户请求时存在多个输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令或执行SQL注入攻击。eFiction的文件上传模块在处理上传文件时没能正确检查文件的扩展名，远程攻击者可以上传php后缀的可执行代码，从而使攻击者可以执行任意指令。eFiction的authors.php、viewstory.php、viewuser.php脚本没有对用户提交的参数数据做充分的检测过滤，攻击者可以通过在输入数据中插入特定
CVSS Information
N/A
Vulnerability Type
N/A