| Titel | here is a file upload vulnerability OTCMS v6.0.1 |
|---|
| Beschreibung | OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details.OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for detailsOTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details |
|---|
| Quelle | ⚠️ https://gitee.com/wkstestete/cve/blob/master/upload/upload1.md |
|---|
| Benutzer | wkstestete (UID 43375) |
|---|
| Einreichung | 24.03.2023 04:21 (vor 4 Jahren) |
|---|
| Moderieren | 31.03.2023 12:41 (7 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 143256 [OTCMS 3.85 sysCheckFile_deal.php SELECT Statement erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|