Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
txtForum ‘common.php’ PHP远程文件包含漏洞
Vulnerability Description
txtForum 1.0.4-dev及其早期版本的common.php中存在PHP远程文件包含漏洞，远程攻击者要通过以下途径包含和执行任意PHP代码：用于login.php的skin参数中的URL，和可能用于其它脚本的其它参数，它们与common.php中的包含叙述有关。
CVSS Information
N/A
Vulnerability Type
N/A