phpRaid 3.0.4和3.0.5中的多个PHP远程文件包含漏洞。远程攻击者通过以下文件的phpraid_dir参数中的URL执行任意代码:(1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php和(13) view.php。
phpRaid 3.0.4和3.0.5中的多个PHP远程文件包含漏洞。远程攻击者通过以下文件的phpraid_dir参数中的URL执行任意代码:(1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php和(13) view.php。