Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Static code injection vulnerability in the Guestbook component in CMS MAXSITE allows remote attackers to inject arbitrary PHP code into the guestbook via the message parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Geniuscyber MAXSITE Guestbook组件'message'参数远程指令执行漏洞
Vulnerability Description
CMS MAXSITE是俄罗斯 MAXSITE组织开发的一款开放源码的的内容管理系统(CMS)。 CMS MAXSITE的Guestbook组件中存在静态代码注入漏洞。远程攻击者可以借助信息参数,向guesbook注入任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A