Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple static code injection vulnerabilities in the Categories module in CutePHP CuteNews 1.4.6 allow remote authenticated users with application administrative privileges to inject arbitrary PHP code into data/category.db.php via the (1) category and (2) Icon URL fields; or (3) inject arbitrary PHP code into data/ipban.php via the add_ip parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CutePHP CuteNews 代码注入漏洞
Vulnerability Description
Cutenews是一款功能强大的新闻管理系统，使用二维表格式文本文件存储数据。 CutePHP CuteNews 1.4.6版本中的Categories模块中存在多个静态代码注入漏洞。 具有管理员的远程认证用户可以借助data/category.db.php的category 和Icon URL字段、data/ipban.php的add_ip参数，注入任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A