| Titel | 南昌蓝智科技有限公司 Jspxcms 10.2.0 ssrf |
|---|
| Beschreibung | Nanchang Lanzhi Technology Co., LTD., a technology provider of Internet information products and solutions, was established in 2011. Committed to the development of Java (Kotlin) technology, is a software enterprise with independent intellectual property rights.
Jspxcms has ssrf vulnerability. Attackers can access /cmscp/ext/collect/fetch_url.do to carry out ssrf attacks. |
|---|
| Quelle | ⚠️ https://github.com/sweatxi/BugHub/blob/main/Nanchang%20Lanzhi%20Technology%20Co_ssrf.pdf |
|---|
| Benutzer | hexixi (UID 59932) |
|---|
| Einreichung | 02.02.2024 18:36 (vor 3 Jahren) |
|---|
| Moderieren | 02.02.2024 20:32 (2 hours later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 199050 [Jspxcms 10.2.0 fetch_url.do url erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|