| Titel | 如沐春 jizhicms V2.5.5 Fileupload |
|---|
| Beschreibung | Jizhicms has a vulnerability in its backend file upload mechanism. Attackers can modify the allowed file types in the backend and add files with the .phar extension, which can enable the upload and parsing of a Webshell. |
|---|
| Quelle | ⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE-2025-1-1.md |
|---|
| Benutzer | Dee.Mirage (UID 71702) |
|---|
| Einreichung | 04.12.2025 08:55 (vor 11 Monaten) |
|---|
| Moderieren | 14.12.2025 13:25 (10 days later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 223107 [Jizhicms 2.4.5 phtml File CommonController.php erweiterte Rechte] |
|---|
| Punkte | 0 |
|---|