| عنوان | FoxCMS <=1.2 Config injection |
|---|
| الوصف | FoxCMS versions ≤1.2 have a critical remote code execution (RCE) vulnerability in the /install/installdb.php file. An attacker can exploit this vulnerability by injecting malicious code into the database password field, which gets written to the configuration file and subsequently executed. This allows the attacker to gain remote code execution on the server. |
|---|
| المصدر | ⚠️ https://note.zhaoj.in/share/iDCwOv9vfDTI |
|---|
| المستخدم | glzjin (UID 59815) |
|---|
| ارسال | 22/12/2024 11:37 AM (2 سنوات منذ) |
|---|
| الاعتدال | 22/12/2024 05:47 PM (6 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 289170 [FoxCMS حتى 1.2 Configuration File /install/installdb.php database password تجاوز الصلاحيات] |
|---|
| النقاط | 18 |
|---|