Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UBBThreads ubbt.inc.php 多个文件包含漏洞
Vulnerability Description
UBB.threads是一款由PHP编写的WEB论坛应用程序,支持多种数据库系统,可使用在多种Unix和Linux操作系统下。 UBB.threads对用户请求的处理上存在输入验证漏洞,远程攻击者可能利用此漏洞注入PHP代码,在服务器上以Web进程权限执行任意命令。 UBB.threads的addpost_newpoll.php脚本没有对thispath变量值做充分的过滤检查,远程攻击者可能利用漏洞变星值插入" http:// "这样的远程引用字串,使服务器包含远程服务器上的PHP脚本代码进行执行,从而以
CVSS Information
N/A
Vulnerability Type
N/A