Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WEBalbum远程命令执行漏洞
Vulnerability Description
在WebAlbum 2.02的start.php中存在目录遍访漏洞，远程攻击者可通过以下途径包含任意文件和执行命令：(1) 通过GET命令将代码注入到本地记录文件中，然后(2)通过位于skin2 COOKIE参数（该参数中包含..）序列和后缀"空"(%00)字节访问该记录文件。
CVSS Information
N/A
Vulnerability Type
N/A