Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magic_quotes_gpc is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the GLOBALS[page] parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ac4p mobilelib_gold 目录遍历漏洞
Vulnerability Description
Mobilelib GOLD 3.0版本的myhtml.php中存在一个目录遍历漏洞。 攻击者首先需要上传一个恶意文件或注入任意指令到现有的文件，然后通过使用GLOBALS[page]参数，来发送一个特制的URL请求到myhtml.php脚本，以便确定一个来自本地系统的恶意文件。成功利用此漏洞可以在易受攻击的web服务器上获取敏感信息或执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A