| عنوان | gitee XunruiCms v4.6.3 Deserialization and code excute |
|---|
| الوصف | There is a deserialization vulnerability in the latest version of Xunrui CMS gitee release, which can execute code and construct POP chains according to the purpose of exploitation, such as RCE chains, execute system commands. A malicious attacker is able to gain privileges on the server. |
|---|
| المصدر | ⚠️ https://github.com/stevenchen0x01/CVE2/blob/main/cve2.md |
|---|
| المستخدم | Steven_Dra3w (UID 76559) |
|---|
| ارسال | 05/02/2025 12:57 PM (2 سنوات منذ) |
|---|
| الاعتدال | 10/02/2025 11:22 AM (5 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 295080 [dayrui XunRuiCMS 4.6.3 Linkage.php import_add تجاوز الصلاحيات] |
|---|
| النقاط | 17 |
|---|