| عنوان | OpenBi OpenBi <=1.0.8 Pre-Authentication Arbitrary File Creation |
|---|
| الوصف | The OpenBI software, specifically in file /application/index/controller/Screen.php, has a Pre-Authentication Arbitrary File Creation vulnerability. This flaw allows an attacker to create a zip file with arbitrary PHP code, which can be executed when accessed. This essentially leads to Remote Code Execution (RCE). The vulnerability has been confirmed in versions up to and including 1.0.8. |
|---|
| المصدر | ⚠️ https://note.zhaoj.in/share/Liu1nbjddxu4 |
|---|
| المستخدم | glzjin (UID 59815) |
|---|
| ارسال | 31/01/2024 07:55 AM (2 سنوات منذ) |
|---|
| الاعتدال | 31/01/2024 02:10 PM (6 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 252475 [openBI حتى 1.0.8 Screen.php index fileurl تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|