Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Simple Online Bidding System index.php file inclusion
Vulnerability Description
A vulnerability was found in SourceCodester Simple Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /simple-online-bidding-system/bidding/index.php. The manipulation of the argument page leads to file inclusion. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
文件名或路径的外部可控制
Vulnerability Title
Simple Online Bidding System 安全漏洞
Vulnerability Description
Simple Online Bidding System是oretnom23个人开发者的一个在线投标系统。 Simple Online Bidding System 1.0版本存在安全漏洞，该漏洞源于文件/simple-online-bidding-system/bidding/index.php的未知部分，操作参数page会导致文件包含。
CVSS Information
N/A
Vulnerability Type
N/A