漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Pegasus CMS 1.0 Remote Code Execution via extra_fields.php
Vulnerability Description
Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by exploiting unsafe eval functionality. Attackers can send POST requests to the submit.php endpoint with malicious PHP code in the action parameter to achieve code execution and obtain an interactive shell.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
WISDOM Pegasus CMS 路径遍历漏洞
Vulnerability Description
WISDOM Pegasus CMS是澳大利亚WISDOM公司的一个内容管理系统。 WISDOM Pegasus CMS 1.0版本存在路径遍历漏洞，该漏洞源于extra_fields.php插件存在远程代码执行漏洞，可能导致未经验证攻击者执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A