Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in load_language.php in CMReams CMS 1.3.1.1 Beta 2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page_language parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMReams load_language.php文件 目录遍历漏洞
Vulnerability Description
Cmeam CMS 是基于Cmbasic的内容管理系统。 CMReams CMS 1.3.1.1 Beta 2的load_language.php中存在目录遍历漏洞, 在register_globals被激活时,远程攻击者通过page_language参数中的目录遍历序列来包含和执行任意本地文件。
CVSS Information
N/A
Vulnerability Type
N/A