إرسال #387268: innocms Innovative Content Management System v0.3.1 SSTiالمعلومات

عنوانinnocms Innovative Content Management System v0.3.1 SSTi
الوصفIn the backend of innocms, you can edit templates for pages like products and about on the "/panel/pages/1/edit" page. These templates allow the execution of functions like system to run system commands, and they can also execute PHP code. This is very dangerous and should not be allowed.
المصدر⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE15-1.md
المستخدم
 Dee.Mirage (UID 71702)
ارسال07/08/2024 09:14 AM (2 سنوات منذ)
الاعتدال16/08/2024 10:48 PM (10 days later)
الحالةتمت الموافقة
إدخال VulDB274907 [InnoCMS 0.3.1 Backend /panel/pages/1/edit تجاوز الصلاحيات]
النقاط17

Do you know our Splunk app?

Download it now for free!