Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mambo MOStlyCE Module Image Manager Utility任意文件上传漏洞
Vulnerability Description
MOStlyCE 2.4版本之前的版本的图像管理器,当在Mambo 4.6.3版本及其早期版本中运行时,远程攻击者可以借助一个FileUpload指令中的修改过的file[NewFile][name], file[NewFile][tmp_name]和file[NewFile][size]参数，且这些参数被用来在is_uploaded_file核查失败时修改$_FILES中的对等自变量，以重命名任意文件并造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A