Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpBB XS 输入验证漏洞
Vulnerability Description
phpBB XS是一款基于PHP的论坛程序 phpBB XS在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 phpBB XS的bb_usage_stats/includes/bb_usage_stats.php脚本没有正确验证phpbb_root_path参数的输入数据，允许攻击者通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了register_globals。bb_usage_stats.php中漏洞代码如下： line 24 in
CVSS Information
N/A
Vulnerability Type
N/A