Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
libs\classes\attachment.class.php in PHPCMS 9.6.0 allows remote attackers to upload and execute arbitrary PHP code via a .txt?.php#.jpg URI in the SRC attribute of an IMG element within info[content] JSON data to the index.php?m=member&c=index&a=register URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPCMS 安全漏洞
Vulnerability Description
PHPCMS是一套基于PHP和Mysql架构的网站内容管理系统。该系统包括新闻、图片、下载、信息、产品等模块。 PHPCMS 9.6.0版本中的libs\classes\attachment.class.php文件存在安全漏洞，该漏洞源于PHPCMS程序在下载远程/本地文件时没有对文件的类型做正确的效验。远程攻击者可利用该漏洞上传并执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A