Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
data/inc/files.php in Pluck 4.7.8 allows remote attackers to execute arbitrary code by uploading a .htaccess file that specifies SetHandler x-httpd-php for a .txt file, because only certain PHP-related filename extensions are blocked.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pluck 代码问题漏洞
Vulnerability Description
Pluck是一套使用PHP语言开发的内容管理系统（CMS）。 Pluck 4.7.8版本中的data/inc/files.php文件存在安全漏洞，该漏洞源于程序只禁止上传带有与PHP相关扩展名的文件。远程攻击者可通过上传.htaccess文件利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A