Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter. NOTE: this issue was later reported to affect 2.01 as well.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SmartISoft phpListPro config.php远程文件包含漏洞
Vulnerability Description
phpListPro是一款流行的基于Web的网站排名投票管理系统。 phpListPro对用户请求的处理上存在输入验证漏洞，远程攻击者可能利用此漏洞注入PHP代码，在服务器上以Web进程权限执行任意命令。 phpListPro的多个脚本没有对returnpath变量值做充分的过滤检查，远程攻击者可能利用漏洞变星值插入" http:// "这样的远程引用字串，使服务器包含远程服务器上的PHP脚本代码进行执行，从而以Web进程权限在系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A