| عنوان | YFCMF-TP6-3.0.4 has a Remote Command Execution vulnerability |
|---|
| الوصف | This vulnerability is entirely caused by thinkphp framework, in yfcmf by default open multi-language(app/admin/controller/Ajax.php), the attacker can use pearcmd file contains to achieve rce.The prerequisite for the exploit is to know the path of the percmd file in the server, if the path is not known then the exploit cannot be performed |
|---|
| المصدر | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%201.md |
|---|
| المستخدم | p0ison (UID 37575) |
|---|
| ارسال | 02/06/2023 08:50 AM (3 سنوات منذ) |
|---|
| الاعتدال | 02/06/2023 01:28 PM (5 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 230542 [YFCMF حتى 3.0.4 index.php الكشف عن المعلومات] |
|---|
| النقاط | 18 |
|---|