Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ between existing and nonexistent pathnames.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ravenphpscripts Raven Web Services RavenNuke ‘images/captcha.php’代码注入漏洞
Vulnerability Description
Raven Web Services RavenNuke的images/captcha.php存在代码注入漏洞。当register_globals和display_errors启用时，远程攻击者利用发送的aFonts阵列参数中带有完整路径名的请求，接着观察错误信息，找出存在和不存在的参数中的不同。从而确定存在哪些本地文件。
CVSS Information
N/A
Vulnerability Type
N/A