Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dotclear ‘swfupload.swf’远程任意文件上传漏洞
Vulnerability Description
DotClear是一个基于PHP和MySQL的Blog系统。 Dotclear中存在远程任意文件上传漏洞，该漏洞源于对用户提供的输入未经充分过滤。攻击者可利用此漏洞在web服务器进程上下文中上传任意代码并运行它，这可能有助于未授权访问或提升权限，也可能执行其他的攻击。Dotclear 2.4.2版本中存在该漏洞，其它版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A