Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple directory traversal vulnerabilities in Pluck CMS 4.5.2 on Windows allow remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the (1) blogpost, (2) cat, and (3) file parameters to data/inc/themes/predefined_variables.php, as reachable through index.php; and the (4) blogpost and (5) cat parameters to data/inc/blog_include_react.php, as reachable through index.php. NOTE: the issue involving vectors 1 through 3 reportedly exists because of an incomplete fix for CVE-2008-3194.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PluckCMS 多个目录遍历漏洞
Vulnerability Description
Pluck CMS是一款用PHP编写的简单内容管理系统 Pluck CMS 4.5.2在Windows平台下存在多个目录遍历漏洞。 远程攻击者可利用构建包含"..\"的URL方式，利用有漏洞的php脚本获取或执行本地的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A