Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) ewiki_id and (2) ewiki_action parameters to fragments/css.php, and possibly the (3) id parameter to the default URI. NOTE: the default URI is site-specific but often performs an include_once of ewiki.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ErfurtWiki fragments/css.php 多个本地文件包含漏洞
Vulnerability Description
ErfurtWiki R1.02b以及之前的版本存在多个目录遍历漏洞。当register_globals被激活时，远程攻击者可以借助到fragments/css.php的(1)ewiki_id 和(2)ewiki_action参数以及可能到默认的URI的(3)id参数中的".." ，放入和运行任意的本地文件。注意：默认的URI是site-specific，但是经常对ewiki.php的include_once进行操作。
CVSS Information
N/A
Vulnerability Type
N/A