TomatoCart 'json.php'任意文件上传漏洞

No description provided by source...

CVE-2014-1604

CVE-2014-1604 affects the RPLY (python-rply) parser generator: the cache functionality in parsergenerator.py before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name. This enables local cache spoofing, as described in multiple refere...