Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
form.php in PMOS Help Desk 2.4 and earlier sends a redirect to the web browser but does not exit, which allows remote attackers to conduct eval injection attacks and execute arbitrary PHP code via the options array parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PMOS Helpdesk form.php 代码注入漏洞
Vulnerability Description
PMOS Help Desk的form.php对网络浏览器发送一个无效的再查问请求,远程攻击者可以借助options array参数导致eval注入攻击并执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A