Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV, and (4) _SERVER variables via the _COOKIE (aka COOKIE) variable, which can overwrite the other variables during an extract function call, probably leading to multiple security vulnerabilities, aka "pollution of the global namespace."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DeluxeBB extract函数多个安全漏洞
Vulnerability Description
DeluxeBB 1.07及之前版本可以使远程攻击者借助可在extract函数调用过程中重写其他变量的_COOKIE(又称COOKIE)变量，重写(1)_GET,(2)_POST,(3)_ENV和(4)_SERVER变量。可能会导致多个安全漏洞，又称"全局命名空间污染"。
CVSS Information
N/A
Vulnerability Type
N/A