描述
In webERP 4.15, the ManualContents.php file allows users to specify the "Language" parameter, which can lead to local file inclusion.
AI分析AI驱动
受影响产品
weberpweberp
4.15
参考资料
- https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/ExploitPatchThird Party Advisory
- https://lyhinslab.org/index.php/2020/05/16/weberp-lfi/ExploitPatchThird Party Advisory