Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and possibly (5) Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the TID parameter, as demonstrated by uploading a .jpg file containing PHP sequences.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WSN多个Web应用系统 index.php 文件包含漏洞
Vulnerability Description
WSN多个Web系统(WSN Forum 4.1.43以及之前的版本，Gallery 4.1.30以及之前的版本，Knowledge Base (WSNKB) 4.1.36以及之前的版本，Links 4.1.44以及之前的版本，Classifieds 4.1.30之前的版本)中的index.php存在目录遍历漏洞。 远程攻击者可以借助TID参数中的".."，放入和运行任意的本地文件。上传一个包含PHP序列的.jpg文件就可以触发该漏洞。
CVSS Information
N/A
Vulnerability Type
N/A