| عنوان | Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 phar Deserialization/RCE |
|---|
| الوصف | A vulnerability classified as critical has been discovered in the CRMEB open source mall system. This affects the downloadImage section of the file CopyTaobaoServices.php (authentication required). Manipulation of the images parameter causes phar deserialisation to enable arbitrary code execution. |
|---|
| المصدر | ⚠️ https://gist.github.com/J1rrY-learn/e15a1926a3b5a2b8805a15cb95eff1d7 |
|---|
| المستخدم | J1rrY (UID 64327) |
|---|
| ارسال | 13/07/2024 07:21 PM (2 سنوات منذ) |
|---|
| الاعتدال | 20/07/2024 11:59 AM (7 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 272065 [ZhongBangKeJi CRMEB حتى 5.4.0 CopyTaobaoServices.php downloadImage تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|