File Uploading Vulnerability in Nanjing Centaur Graduation Design System

Nanjing Xianji Graduation Design System is a set of management system that runs through the whole process of school graduation design thesis. A file upload vulnerability exists in Nanjing Centaur Graduation Design System, which can be exploited by attackers to upload arbitrary files...

SiteBuilder-FX top.php admindir Parameter Remote File Inclusion

The remote host is running SiteBuilder-FX, a web-based design system written in PHP. The version of SiteBuilder-FX installed on the remote host fails to sanitize input to the 'admindir' parameter of the 'admin/top.php' script before using it to include PHP code. Regardless of the setting of PHP's...