إرسال #706116: 如沐春 jizhicms V2.5.5 Fileuploadالمعلومات

عنوان如沐春 jizhicms V2.5.5 Fileupload
الوصفJizhicms has a vulnerability in its backend file upload mechanism. Attackers can modify the allowed file types in the backend and add files with the .phar extension, which can enable the upload and parsing of a Webshell.
المصدر⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE-2025-1-1.md
المستخدم
 Dee.Mirage (UID 71702)
ارسال04/12/2025 08:55 AM (11 أشهر منذ)
الاعتدال14/12/2025 01:25 PM (10 days later)
الحالةمكرر
إدخال VulDB223107 [Jizhicms 2.4.5 phtml File CommonController.php تجاوز الصلاحيات]
النقاط0

Do you want to use VulDB in your project?

Use the official API to access entries easily!