| عنوان | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability |
|---|
| الوصف | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability.The problem is in app/admin/controller/Ajax.php in the lang function, the vulnerability can be in the framework does not open the multilingual when the inclusion of php files to achieve the effect of rce.YFCMF version is TP6-3.0.4 |
|---|
| المصدر | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.md |
|---|
| المستخدم | p0ison (UID 37575) |
|---|
| ارسال | 02/06/2023 08:59 AM (3 سنوات منذ) |
|---|
| الاعتدال | 02/06/2023 01:28 PM (4 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 230543 [YFCMF حتى 3.0.4 Ajax.php controllername الكشف عن المعلومات] |
|---|
| النقاط | 17 |
|---|