| عنوان | DefaultFuction CMS V1.0.0 Command Injection |
|---|
| الوصف | A Command Injection vulnerability was identified in the Content Management System. The issue occurs when the application passes user-supplied input to system shell commands (such as ping, nslookup, or traceroute) without proper validation, sanitization, or escaping. An attacker can inject arbitrary operating system commands by appending command separators or operators to the legitimate input parameter, causing the server to execute malicious commands with the privileges of the web application.
|
|---|
| المصدر | ⚠️ https://github.com/DefaultFuction/Content-Management-System/issues/1 |
|---|
| المستخدم | Practice (UID 95611) |
|---|
| ارسال | 16/03/2026 02:42 PM (7 أشهر منذ) |
|---|
| الاعتدال | 01/04/2026 04:02 PM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 354667 [DefaultFuction Content-Management-System 1.0 /admin/tools.php host تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|