漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
PHP-Charts v1.0 PHP Code Execution
Vulnerability Description
PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution under the web server's context. The vulnerability allows unauthenticated attackers to execute system-level commands via base64-encoded payloads embedded in parameter names, leading to full compromise of the host system.
CVSS Information
N/A
Vulnerability Type
动态执行代码中指令转义处理不恰当(Eval注入)
Vulnerability Title
PHP-Charts 安全漏洞
Vulnerability Description
PHP-Charts是PHP-Charts公司的一个图标生成软件。 PHP-Charts v1.0版本存在安全漏洞，该漏洞源于未清理GET参数，可能导致PHP代码执行。
CVSS Information
N/A
Vulnerability Type
N/A