| عنوان | JPress CMS Remote Command Execution Vulnerability |
|---|
| الوصف | JPress is a WordPress like product developed in Java that supports automatic switching between multiple sites and languages.
JPress is an open-source and free site building artifact developed in Java, inspired by WordPress. At present, more than 10w+websites have been built using JPress, including many government agencies, 200+listed companies, Chinese Academy of Sciences, Red Cross Society, etc.
There is a system plug-in interface that can be uploaded in the background of JPress. Specifically, it is uploaded by jar package or zip. Java code contains the test class of the uploaded plug-in. We can construct a malicious jar package and upload it to the system server, and access the interface of the test class to trigger parsing, thus causing remote command execution.
This vulnerability can be used to execute server system commands and obtain system information.
Vulnerability address: http://ip:8080/admin/addon/test
Code download address: https://gitee.com/JPressProjects/jpress.git
Vulnerability location: upload the plug-in function node after logging into the system. |
|---|
| المصدر | ⚠️ https://github.com/Ha0Liu/cveAdd/blob/developer/JPress远程命令执行/JPress%20CMS%20Remote%20Command%20Execution%20Vulnerability.md |
|---|
| المستخدم | ha0l (UID 35011) |
|---|
| ارسال | 23/11/2022 09:47 AM (4 سنوات منذ) |
|---|
| الاعتدال | 24/11/2022 02:56 PM (1 day later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 192332 [JPress 4.2.0 JAR Package HelloWorldAddonController.java تجاوز الصلاحيات] |
|---|
| النقاط | 0 |
|---|