Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PMB 5.6 - 'chemin' Local File Disclosure
Vulnerability Description
PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' parameter. Attackers can exploit the unsanitized file path input to access sensitive files like /etc/passwd by sending crafted requests to the getgif.php endpoint.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
SIGB PMB 路径遍历漏洞
Vulnerability Description
SIGB PMB是SIGB公司的一个开源集成图书馆管理系统。 SIGB PMB 5.6版本存在路径遍历漏洞，该漏洞源于getgif.php中对chemin参数的操作不当，可能导致本地文件泄露。
CVSS Information
N/A
Vulnerability Type
N/A