Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DreamAccount 'index.php'远程文件包含漏洞
Vulnerability Description
DreamAccount是一款基于PHP的成员管理程序。 DreamAccount实现上存在输入验证漏洞,远程攻击者可能利用此漏洞在服务器上执行任意命令。 DreamAccount的/admin/index.php脚本没有对path变量做充分地检查过滤,远程攻击者可能利用此漏洞使脚本包含远程服务器上的代码执行。
CVSS Information
N/A
Vulnerability Type
N/A