| Titel | Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 Arbitrary file reading |
|---|
| Beschreibung | A vulnerability classified as critical has been discovered in the CRMEB open source mall system. This affects the get_image_base64 section of the file PublicController.php. Manipulation of the image/code parameter results in arbitrary file reads. |
|---|
| Quelle | ⚠️ https://gist.github.com/J1rrY-learn/93a0cf71894570f4eb39344161beb44c |
|---|
| Benutzer | J1rrY (UID 64327) |
|---|
| Einreichung | 13.07.2024 22:17 (vor 2 Jahren) |
|---|
| Moderieren | 20.07.2024 11:59 (7 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 272066 [ZhongBangKeJi CRMEB bis 5.4.0 PublicController.php get_image_base64 file erweiterte Rechte] |
|---|
| Punkte | 17 |
|---|