Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Visualshapers ezContents CMS 'module.php'目录遍历保护机制绕过漏洞
Vulnerability Description
ezContents是一款开放源代码内容管理系统。 ezContents的module.php脚本存在目录遍历保护机制绕过漏洞。远程攻击者可以借助link参数中使用"....//"序列包含本地任意文件导致执行任意代码。这是由于在使用str_replace函数时没有正确的过滤序列。
CVSS Information
N/A
Vulnerability Type
N/A