Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter. NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution by uploading and accessing an avatar file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
David Bennett PHP-Post 'footer.php'目录遍历漏洞
Vulnerability Description
David Bennett PHP-Post (PHPp)的footer.php中存在目录遍历漏洞,远程攻击者可以通过template参数(该参数中包含..)序列读取和包含任意本地文件。
CVSS Information
N/A
Vulnerability Type
N/A