Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen enabled, allow remote attackers to execute arbitrary code via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RunCMS远程代码执行漏洞
Vulnerability Description
RunCMS 1.2及之前版本中存在多个PHP远程文件包含漏洞。在启用了register_globals和allow_url_fopen的情况下，远程攻击者可以借助(1) class.forumposts.php和(2) forumpollrenderer.php中的bbPath[path]参数执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A