Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Eval injection vulnerability in index.php in phpSlash 0.8.1.1 and earlier allows remote attackers to execute arbitrary PHP code via the fields parameter, which is supplied to an eval function call within the generic function in include/class/tz_env.class. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpSlash 'fields' Parameter 远程指令执行漏洞
Vulnerability Description
phpSlash是一款小巧灵活的内容管理系统(CMS)。 phpSlash 0.8.1.1及之前版本中的index.php存在Eval注入漏洞。远程攻击者可以借助字段参数，执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A