Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
websitebaker 代码注入漏洞
Vulnerability Description
websitebaker是个人开发者的一个基于PHP的内容管理系统。它的特点包括基于模板的前台界面,分页支持, 多用户管理等。 websitebaker 2.10.0版本中的installsave.php文件存在代码注入漏洞。远程攻击者可借助‘database_username’参数利用该漏洞执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A