Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameter with "logs/" in between two . (dot) characters, which is filtered into a "../" sequence.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vivvo CMS files.php目录遍历漏洞
Vulnerability Description
Vivvo CMS是一款国外的商业内容管理系统，基于Ajax后台管理。 Vivvo CMS的files.php页面没有正确地过滤用户在POST或GET请求中所提交的file参数，远程攻击者可以通过向服务器提交恶意参数请求执行目录遍历攻击，读取任意系统文件。以下是有漏洞代码段： -----------------------------[source code start]------------------------------- if (isset($_REQUEST["file"])) { $fil
CVSS Information
N/A
Vulnerability Type
N/A