Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
code/sitefeatures/PageCommentInterface.php in SilverStripe 2.4.x before 2.4.6 might allow remote attackers to execute arbitrary code via a crafted cookie in a user comment submission, which is not properly handled when it is deserialized.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SilverStripe 输入验证漏洞
Vulnerability Description
SilverStripe CMS是新西兰SilverStripe公司的一套开源的编程框架和内容管理系统 (CMS)。该系统具有支持多国语言、跨平台等特点。 SilverStripe 2.4.6之前的2.4.x版本中的code/siteRuby on Rails（Rails）是一个使用Ruby语言写的开源Web应用框架。features是其中的一个文本解析器。/PageCommentInterface.php中存在漏洞。远程攻击者可利用该漏洞通过反序列化未正确处理的用户提交评论中特制的cookie，执行任意
CVSS Information
N/A
Vulnerability Type
N/A