漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by some sources, but that is just one attack; the primary vulnerability is eval injection.
漏洞信息
N/A
漏洞
N/A
漏洞
ClanSys index.php Eval注入漏洞
漏洞信息
ClanSys 1.1中的 index.php存在Eval注入漏洞。这使得远程攻击者可以借助于page参数中的PHP代码执行任意PHP代码,如使用"include"语句,该语句被注入到eval语句中。 注意:此问题被描述为由源文件造成的文件包含,但其只是一次攻击;主要漏洞是eval注入。
漏洞信息
N/A
漏洞
N/A