Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Blog Pixel Motion admin/sauvBase.php 授权问题漏洞
Vulnerability Description
Blog Pixel Motion (aka Blog PixelMotion)中的admin/sauvBase.php并不要求权限验证,远程攻击者触发一个数据库文件备份转储同时获得包含敏感信息的blogPM.sql文件。
CVSS Information
N/A
Vulnerability Type
N/A