| عنوان | publiccms PublicCMS <= V5.202506.d Remote Code Execution (RCE) |
|---|
| الوصف | A critical path traversal vulnerability exists in the task template management system that allows authenticated administrators to write arbitrary files to the filesystem. By exploiting the weak path sanitization, an attacker can overwrite system scripts that are later executed by the scheduled task system, leading to remote code execution with server privileges.
|
|---|
| المصدر | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/2 |
|---|
| المستخدم | Ana10gy (UID 93358) |
|---|
| ارسال | 06/01/2026 04:05 PM (9 أشهر منذ) |
|---|
| الاعتدال | 17/01/2026 09:58 AM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 341703 [Sanluan PublicCMS حتى 5.202506.d Task Template Management TaskTemplateAdminController.java save path اجتياز الدليل] |
|---|
| النقاط | 18 |
|---|