Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Php Blue Dragon 'pbd_engine.php'目录遍历漏洞
Vulnerability Description
Php Blue Dragon的pbd_engine.php中存在目录遍历漏洞,远程攻击者可以通过phpExt参数(该参数中包含..)序列读取和执行任意本地文件,如通过执行日志文件中的PHP代码所示。
CVSS Information
N/A
Vulnerability Type
N/A