漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, which leads to certain privilege checks not being in place, and therefore a user can escalate privileges to admin.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Wwbn Avideo 安全漏洞
Vulnerability Description
Wwbn Avideo是Wwbn团队的一个由PHP编写的视频平台建站系统。 Avideo 8.9之前版本存在安全漏洞,该漏洞源于import.json.php文件有文件删除漏洞。这允许删除configuration.php,这将导致某些特权检查不到位,因此用户可以将特权升级为admin。
CVSS Information
N/A
Vulnerability Type
N/A