Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/_widged.php (aka the WidgEd plugin), possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Logahead UNU '_widged.php'认证绕过漏洞
Vulnerability Description
Logahead是一款开源的blog软件，具有tagging、拖放等功能。 Logahead的extras/plugins/widged/_widged.php脚本中存在认证绕过漏洞，未经认证的攻击者向服务器上传文件。此外，该脚本还没有验证上传文件的扩展名，攻击者上传有任意扩展名(如.php)的文件并在服务器上执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A