Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Elefant CMS 安全漏洞
Vulnerability Description
Elefant CMS是一款基于PHP的内容管理系统（CMS）。该系统包括活动日历、联系表单、社交媒体集成和会员登录等功能。 Elefant CMS 2.0.3版本中的apps/filemanager/handlers/upload/drop.php文件存在安全漏洞，该漏洞源于在‘无法上传可执行文件’的保护机制中，程序没有及时的执行URL解码操作。远程攻击者可通过发送特制的请求利用该漏洞在受影响系统上执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A