Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in common.php in CMScout 2.05, when .htaccess is not supported, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bit parameter, as demonstrated by an upload to avatar/ of a .jpg file containing PHP sequences.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMScout 'common.php' 本地文件包含漏洞
Vulnerability Description
CMScout 是一个免费的开源内容管理系统。 CMScout 2.05版本中的common.php存在目录遍历漏洞。当.htaccess未被支持时，远程攻击者可以借助bit参数中的目录遍历序列，比如上传到包含PHP序列的.jpg文件的avatar，放入和运行任意的本地文件。
CVSS Information
N/A
Vulnerability Type
N/A