Submit #632537: HuangDou UTCMS V9 RCE vulnerability for remote file download in the background
| Titel | HuangDou UTCMS V9 RCE vulnerability for remote file download in the background |
|---|---|
| Beschreibung | In the update.php page, users can remotely downloading the compressed package and automatically decompressing it and RCE. |
| Quelle | ⚠️ https:/ |
| Benutzer | Yu Bao (UID 88956) |
| Einreichung | 12.08.2025 15:50 (vor 1 Jahr) |
| Moderieren | 24.08.2025 16:52 (12 days later) |
| Status | Akzeptiert |
| VulDB Eintrag | 321238 [HuangDou UTCMS 9 Config update.php UPDATEURL erweiterte Rechte] |
| Punkte | 15 |