| عنوان | KodExplorer KodExplorer <=4.51.03 Auth bypass && file extract unrestricted to RCE |
|---|
| الوصف | Kodexplorer has an api endpoint auth bypass vuln, which allow ebil user to bypass api endpoint auth to access api endpoint, and builtin plugin zipView has an unrestricted file extract vuln, evil user may invoke it to extract remote zip file and create php webshell file in the target. |
|---|
| المصدر | ⚠️ https://note.zhaoj.in/share/D44UjzoFXYfi |
|---|
| المستخدم | glzjin (UID 59815) |
|---|
| ارسال | 11/12/2023 11:06 AM (3 سنوات منذ) |
|---|
| الاعتدال | 15/12/2023 05:38 PM (4 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 248219 [kalcaddle KodExplorer حتى 4.51.03 ZIP Archive plugins/zipView/app.php unzipList تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|