Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)
Vulnerability Description
WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbitrary code. Attackers can exploit the language installation endpoint by manipulating language installation parameters to achieve remote code execution on the server.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
websitebaker 安全漏洞
Vulnerability Description
websitebaker是WebsiteBaker组织的一个基于PHP的内容管理系统。它的特点包括基于模板的前台界面，分页支持, 多用户管理等。 websitebaker 2.13.0版本存在安全漏洞，该漏洞源于经过身份验证的用户可利用语言安装端点，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A