Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an error message. NOTE: this was originally claimed to be SQL injection, but it is probably resultant from another issue in functions.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jemscripts DownloadControl dc.php 无效dcid参数 信息泄露漏洞
Vulnerability Description
Jemscripts DownloadControl 1.0 可以使远程攻击者借助可在错误讯息中泄漏路径名称的对dc.php的无效dcid参数，获得敏感信息。注意: 此问题最初被称为SQL注入，但它可能由functions.php内的另一问题所致。
CVSS Information
N/A
Vulnerability Type
N/A