Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
LaikeTui 代码问题漏洞
Vulnerability Description
LaikeTui（来客电商）是个人开发者的稳定且小巧的开源商城系统。 LaikeTui 中存在代码问题漏洞，该漏洞源于允许经过授权的用户通过 index.php?module=system&action=pay 上传一个带有php文件的zip包来执行代码，攻击者可通过该漏洞执行恶意代码。 以下产品及版本会受到影响：LaikeTui 3.5.0。
CVSS Information
N/A
Vulnerability Type
N/A