Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The sanitize function in Codoforum 2.5.1 does not properly implement filtering for directory traversal sequences, which allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Codoforum 路径遍历漏洞
Vulnerability Description
Codoforum是一套免费的基于PHP和MySQL的论坛软件。 Codoforum 2.5.1版本中的‘sanitize’函数存在安全漏洞，该漏洞源于程序没有正确过滤目录遍历序列。远程攻击者可借助index.php脚本的‘path’参数中的‘..’字符利用该漏洞读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A