joekoe CMS 4.0 注入漏洞

Joekoe CMS 4.0 给您带来一个经过完善的设计，在会员互动及安全方面有独特创新性的系统，适用于Windows NT服务环境下的的Web站点或商务平台的最佳解决方案。它精心设计的架构与功能机制，从个人到企业各方面应用的要求，为你提供一个安全、稳定、高效而快捷的Web站点和一体化的商务平台解决方案。 在web.upload.asp中： ........... sub doParseUploadData dim tmpFilePath,tmpFileType,tmpFileSize,tmpName tmpFilePath=up.getFileInfo"file.path"...

CVE-2002-1759

The CVE-2002-1759 entry concerns PHProjekt versions 2.0–3.1 where the upload function does not properly verify certain variables related to uploaded data. This gap enables remote attackers to cause PHProjekt to process arbitrary files, indicating a potential arbitrary-file upload exposure. The pr...

CVE-2002-1759

The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files...