Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in libraries/database.php in Efront 3.5.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eFront 'database.php'远程文件包含漏洞
Vulnerability Description
Efront 3.5.4版本及其早期版本的libraries/database.php中存在PHP远程文件包含漏洞。当register_globals被激活时，远程攻击者可以借助路径参数中的一个URL，执行任意PHP代码。注意：该漏洞只有在管理员没有遵循产品的安全说明时才出现。
CVSS Information
N/A
Vulnerability Type
N/A