Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the data_dir parameter, which satisfies the file_exists function call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPAlbum Language.PHP 远程文件包含漏洞
Vulnerability Description
当启用register_globals时,PHP Album 0.3.2.3中的language.php中的PHP 远程文件包含漏洞允许远程攻击者借助于data_dir参数中的FTP URL(满足了file_exists函数调用)执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A