| عنوان | yitong cmseasy CMSEASY 7.7.7.9 Code Injection |
|---|
| الوصف | In lib/tool/functions.php:2535, an attacker can exploit arbitrary file include vulnerability through path parameter and use php filter chain to invoke RCE. |
|---|
| المصدر | ⚠️ https://ctf-n0el4kls.notion.site/CMSEASY-RCE-Vulnerability-6681c6f2b81748c1a32bcc4ea53965c0?pvs=74 |
|---|
| المستخدم | n0el4kls (UID 80089) |
|---|
| ارسال | 22/01/2025 04:34 AM (2 سنوات منذ) |
|---|
| الاعتدال | 02/02/2025 08:56 AM (11 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 263397 [CmsEasy 7.7.7.9 template_admin.php file_get_contents تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|