Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setup/header.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP Live 'help.php和setup/header.php' css_path远程文件包含漏洞
Vulnerability Description
PHP Live!是一种构架于PHP、MySQL之上的开源软件,为企业用户提供实时交谈服务。 PHP Live!没有正确过滤对help.php和setup/header.php文件的css_path参数的输入,允许远程攻击者通过包含本地和外部资源导致执行任意PHP代码。 漏洞代码如下: <? $css_path = ( !isset( $css_path ) ) ? $css_path = "./" : $css_path ; include_once( $css_path."css/default.ph
CVSS Information
N/A
Vulnerability Type
N/A