PHPWind 7.5 /apps/groups/index.php 远程文件包含漏洞

No description provided by source...

PHPWind 7.5 apps-share-index.php 文件包含漏洞

No description provided by source...

Phpwind 7.5 多个本地文件包含漏洞

No description provided by source...

phpwind 7.5 apps/groups/index.php远程包含漏洞

apps/groups/index.php 里$route和$basePath变量没有初始化,导致远程包含或者本地包含php文件,导致执行任意php代码 ?php if $route == "groups" requireonce $basePath . '/action/mgroups.php'; elseif $route == "group" requireonce $basePath . '/action/mgroup.php'; elseif $route == "galbum" requireonce $basePath . '/action/mgalbum.php';...