Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ADOdb for PHP 'tmssql.php'测试脚本动态代码求值漏洞
Vulnerability Description
ADOdb for PHP 4.70之前版本的tests/tmssql.php测试脚本中的动态代码求值漏洞(用在多个产品中，包括(1) Mantis、(2) PostNuke、(3) Moodle、(4) Cacti、(5) Xaraya、(6) PhpOpenChat，可能还有(7) MAXdev MD-Pro和(8) Simplog)，远程攻击者可以通过保存在随后作为函数执行的变量中的do参数执行任意PHP函数，如使用phpinfo所示。
CVSS Information
N/A
Vulnerability Type
N/A