Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MCGalleryPRO 'random2.php'PHP远程文件包含漏洞
Vulnerability Description
mcGalleryPRO是一款图片收藏管理程序 mcGalleryPRO的random2.php文件没有正确过滤对path_to_folder参数的输入，攻击者可以通过包含本地或外部资源的任意文件执行PHP代码。 random2.php中有漏洞的代码如下： if (!empty($_SERVER)) { extract($_SERVER, EXTR_OVERWRITE); } if (!empty($_GET)) { extract($_GET, EXTR_OVERWRITE); } if (!empty
CVSS Information
N/A
Vulnerability Type
N/A