Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Snoopy _httpsrequest()模块Shell命令执行漏洞
Vulnerability Description
Snoopy是模拟web浏览器的PHP类,可自动完成检索网页内容和张贴表单等任务。 Snoopy没有正确地过滤对_httpsrequest()函数的输入便在exec()调用中使用,远程攻击者可以提供特制的URL通过fetch()或submit()函数注入并执行任意shell命令。
CVSS Information
N/A
Vulnerability Type
N/A