| Titel | JiZhiCMS is vulnerable to Unrestricted File Upload |
|---|
| Beschreibung | JiZhiCMS 2.4.5 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.This vulnerability is at the plugin, we can download the specified zip through the control url, and then unzip it to upload a Trojan. |
|---|
| Quelle | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/JiZhiCMS%20is%20vulnerable%20to%20Unrestricted%20File%20Upload%20which%20allows%20remote%20attackers%20to%20execute%20arbitrary%20code%20by%20uploading%20a%20php%20file.md |
|---|
| Benutzer | p0ison (UID 37575) |
|---|
| Einreichung | 01.06.2023 09:56 (vor 3 Jahren) |
|---|
| Moderieren | 06.06.2023 12:20 (5 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 198451 [Jizhicms 1.9.5 update.html erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|