Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the default theme directory (/themes/defaut/css/minify.php). An authenticated administrator user can overwrite this file with arbitrary PHP code via the admin panel, enabling execution of system commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PluXml 安全漏洞
Vulnerability Description
PluXml是PluXml开源的一个免费的开源内容管理系统，不需要数据库即可工作。 PluXml存在安全漏洞，该漏洞源于默认主题目录下的minify.php文件允许管理员通过管理面板覆盖任意PHP代码，可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A