Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with <?php content, because of insufficient input validation in apps/designer/handlers/csspreview.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Elefant CMS 代码注入漏洞
Vulnerability Description
Elefant CMS是一款基于PHP的内容管理系统（CMS）。该系统包括活动日历、联系表单、社交媒体集成和会员登录等功能。 Elefant CMS 2.0.7之前版本中的/designer/add/stylesheet.php文件的New Stylesheet Name字段存在安全漏洞。攻击者可借助.php文件名及<?php内容利用该漏洞执行PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A