Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The b_system_comments_show function in htdocs/modules/system/blocks/system_blocks.php in XOOPS before 2.0.18 does not check permissions, which allows remote attackers to read the comments in restricted modules.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
XOOPS 'b_system_comments_show'信息泄露漏洞
Vulnerability Description
XOOPS是利用 PHP+MySQL 编写的面向对象的可扩展智能建站门户系统。 XOOPS的htdocs/modules/system/blocks/system_blocks.php中的b_system_comments_show功能存在信息泄露漏洞。远程攻击者可以借助此漏洞,阅读受限制的模块。
CVSS Information
N/A
Vulnerability Type
N/A