漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
Multiple PHP remote file inclusion vulnerabilities in the lmtg_myhomepage Component (com_lmtg_myhomepage) for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) install.lmtg_homepage.php and (2) mtg_homepage.php. NOTE: this issue has been disputed by a third party, who states that the $mosConfig_absolute_path variable is only used within a function definition. CVE source code analysis on 20060824 is not conclusive but tends to concur with the dispute. In addition, it appears that the component name is actually "lmtg_myhomepage"
漏洞信息
N/A
漏洞
N/A
漏洞
Mambo软件的lmtg_myhomepage组件多个PHP远程文件包含漏洞
漏洞信息
**有争议** Mambo软件的lmtg_myhomepage组件(com_lmtg_myhomepage)存在多个PHP远程文件包含漏洞,远程攻击者可借助(1) install.lmtg_homepage.php和 (2) mtg_homepage.php脚本中mosConfig_absolute_path参数中的URL执行任意PHP代码。注 :第三方对此问题存在争议,称$mosConfig_absolute_path变量只用于函数定义。对2006年8月24日发布的CVE源代码分析尚无结论,但结果往往存
漏洞信息
N/A
漏洞
N/A