Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request variable containing serialised PHP object. This vulnerability appears to have been fixed in after commit 097eae0.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenPSA 代码问题漏洞
Vulnerability Description
OpenPSA是一套基于Web的开源商业管理套件。该产品包括项目生命周期管理、销售管理和文档管理等功能。 OpenPSA中存在PHP对象注入漏洞。远程攻击者可通过发送带有序列化PHP对象的特制GET请求变量利用该漏洞泄露信息,执行代码。
CVSS Information
N/A
Vulnerability Type
N/A