Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in ofc_upload_image.php in Open Flash Chart v2 Beta 1 through v2 Lug Wyrm Charmer, as used in Piwik 0.2.35 through 0.4.3, Woopra Analytics Plugin before 1.4.3.2, and possibly other products, when register_globals is enabled, allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension through the name parameter with the code in the HTTP_RAW_POST_DATA parameter, then accessing it via a direct request to the file in tmp-upload-images/.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Open Flash Chart 'ofc_upload_image.php'非限制文件上传漏洞
Vulnerability Description
Piwik 0.2.35至0.4.3版本，Woopra Analytics Plugin 1.4.3.2之前版本及其他产品中使用的Open Flash Chart v2 Beta 1至v2 Lug Wyrm Charmer的ofc_upload_image.php中存在非限制文件上传漏洞。当register_globals被激活时，远程认证用户可通过上传一个可执行扩展的文件执行任意代码，该文件名具有HTTP_RAW_POST_DATA参数中的代码，并通过对tmp-upload-images/中文件的一个直
CVSS Information
N/A
Vulnerability Type
N/A