Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was found in mipjz 5.0.5. In the mipPost method of \app\setting\controller\ApiAdminTool.php, the value of the postAddress parameter is not processed and is directly passed into curl_exec execution and output, resulting in a Server-side request forgery (SSRF) vulnerability that can read server files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
mipjz 安全漏洞
Vulnerability Description
mipjz是sansanyun个人开发者的一套基于百度移动加速器 MIP 而开发的内容管理系统。 mipjz 5.0.5版本存在安全漏洞，该漏洞源于appsettingcontrollerApiAdminTool.php中的mipPost方法对postAddress参数处理不当，并直接传递给curl_exec执行并输出，容易受到服务端请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A