Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in the writeLogEntry function in system/v_cron_proc.php in PHPizabi 0.848b C1 HFP1, when register_globals is enabled, allows remote attackers to upload and execute arbitrary code via a filename in the CONF[CRON_LOGFILE] parameter and file contents in the CONF[LOCALE_LONG_DATE_TIME] parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPizabi 'v_cron_proc.php' 任意脚本注入漏洞
Vulnerability Description
PHPizabi是一款代码开源的网上交友、交流、婚介、商务合作系统。 PHPizabi 0.848b C1 HFP1的system/v_cron_proc.php的writeLogEntry函数中存在无限制文件上传漏洞。在register_globals被激活后, 远程攻击者通过CONF[CRON_LOGFILE] 参数的一个文件名 和CONF[LOCALE_LONG_DATE_TIME] 参数中的文件内容来上传和执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A