Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the config[private] parameter in multiple files, as demonstrated by (1) index.php, (2) faq.php, and (3) hardware.php. NOTE: this issue has been disputed by multiple third-party researchers, who state that config[private] is initialized in an include file before being used
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RETIRED: DoubleSpeak 多个远程文件包含漏洞
Vulnerability Description
** 有争议 ** DoubleSpeak 0.1存在PHP远程文件包含漏洞。register_globals启用时，远程攻击者可以借助多个文件中的config[private]参数，执行任意PHP代码，比如(1) index.php, (2) faq.php和(3) hardware.php。注: 多位第三方研究者对此提出反驳，声称config[private]在被使用前已在include文件中初始化。
CVSS Information
N/A
Vulnerability Type
N/A