Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and sometimes terminal commands) on a server by making an avatar update and then visiting the avatar file under the /images/ path.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sourcefabric Newscoop 代码问题漏洞
Vulnerability Description
Sourcefabric Newscoop是捷克Sourcefabric公司的一套开源的新闻内容管理系统（CMS）。 Sourcefabric Newscoop 4.4.7版本中存在代码问题漏洞。攻击者可利用该漏洞在服务器上执行任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A