Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in includes/header.php in Hedgehog-CMS 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the c_temp_path parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hedgehog-cms includes/header.php 目录遍历漏洞
Vulnerability Description
Hedgehog-CMS 1.21的includes/header.php中存在目录遍历漏洞，远程攻击者借助页参数的一个.. (参数中包含'..')来包含和执行任意本地文件。注意: 在某些环境中,该漏洞可通过分享路径名或一个ftp, ftps, 或 ssh2.sftp URL来形容远程文件包含漏洞。
CVSS Information
N/A
Vulnerability Type
N/A