Submit #506657: hzmanyun.com education and training system v2.1 Command Injection To RCEinfo

Titelhzmanyun.com education and training system v2.1 Command Injection To RCE
BeschreibungThe code snippet provided contains a vulnerability that allows an attacker to execute arbitrary commands on the server, leading to Remote Code Execution (RCE) due to improper handling of user input.
Quelle⚠️ https://github.com/heiheixz/report/blob/main/nxb_1.md
Benutzer
 heihei_XZ (UID 81980)
Einreichung25.02.2025 14:25 (vor 1 Jahr)
Moderieren04.03.2025 14:50 (7 days later)
StatusAkzeptiert
VulDB Eintrag298520 [hzmanyun Education and Training System 2.1 /user/exportPDF ID erweiterte Rechte]
Punkte16

Want to stay up to date on a daily basis?

Enable the mail alert feature now!