| عنوان | 10year lmxcms 1.4 RCE |
|---|
| الوصف | There is code execution at AcquisiModel.class.php of lmxcms, and there is a dangerous function eval in its formatData() method, which can be queried to get the malicious code after executing in and out of the malicious code through the backend sql and utilizing the formaData() method. |
|---|
| المصدر | ⚠️ https://github.com/gaorenyusi/gaorenyusi/blob/main/lmx.md |
|---|
| المستخدم | gaorenyusi (UID 74236) |
|---|
| ارسال | 29/08/2024 06:00 PM (2 سنوات منذ) |
|---|
| الاعتدال | 06/09/2024 05:30 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 276728 [lmxcms حتى 1.4 SQL Command Execution admin.php?m=Acquisi&a=testcj&lid=1 formatData data تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|