Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_globals is enabled, allows remote attackers to modify arbitrary program variables via parameters, which are evaluated as PHP variable variables, as demonstrated by performing PHP remote file inclusion using the include_files array parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jetbox CMS config.php 远程文件包含漏洞
Vulnerability Description
Jetbox是一款使用php和mysql的内容管理系统 jetbox/includes/phpdig/includes/config.php文件未经声明便使用了include()函数中的relative_script_path变量，允许攻击者包含远程资源的文件，执行任意代码。 漏洞代码： if (is_file("$relative_script_path/locales/$phpdig_language-language.php")) {include "$relative_script_path/lo
CVSS Information
N/A
Vulnerability Type
N/A