Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands via a specific php artisan command.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
参数注入或修改
Vulnerability Title
Voyager 安全漏洞
Vulnerability Description
Voyager是David Borland个人开发者的一个应用程序。 Voyager 1.4.0版本至1.8.0版本存在安全漏洞,该漏洞源于认证管理员可通过特定php artisan命令执行任意OS命令。
CVSS Information
N/A
Vulnerability Type
N/A