123solar 安全漏洞

123Solar is a set of lightweight PHP/JS files from the individual developer Jean-Marc Louviaux. A security vulnerability exists in 123solar 1.8.4.5 and earlier versions, which stems from the parameter PROTOCOLx in the file /admin/admininvt2.php that can lead to a remote attack on the file...

PT-2024-39533 · Jeanmarc77 · 123Solar

Name of the Vulnerable Software and Affected Versions: jeanmarc77 123solar versions up to 1.8.4.5 Description: A critical issue affects the processing of the file /admin/admin invt2.php. The manipulation of the argument PROTOCOLx leads to file inclusion. This issue can be exploited remotely...