Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[root_path] parameter to usr/extensions/get_tree.inc.php or (2) root_path parameter to usr/extensions/get_infochannel.inc.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAPID CMS 多个PHP远程文件包含漏洞
Vulnerability Description
SAPID CMS中存在多个PHP远程文件包含漏洞，该漏洞源于对用户提供的数据未经正确过滤。攻击者可利用该漏洞获得潜在的敏感信息，或者在web服务进程上下文中执行任意本地脚本。这可能导致攻击者操控应用程序进而控制电脑，也可能执行其他的攻击。SAPID CMS 1.2.3版本中存在该漏洞，其他版本中也可能受影响。
CVSS Information
N/A
Vulnerability Type
N/A