Enviar #387268: innocms Innovative Content Management System v0.3.1 SSTiinformación

Títuloinnocms Innovative Content Management System v0.3.1 SSTi
DescripciónIn the backend of innocms, you can edit templates for pages like products and about on the "/panel/pages/1/edit" page. These templates allow the execution of functions like system to run system commands, and they can also execute PHP code. This is very dangerous and should not be allowed.
Fuente⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE15-1.md
Usuario
 Dee.Mirage (UID 71702)
Sumisión2024-08-07 09:14 (hace 2 años)
Moderación2024-08-16 22:48 (10 days later)
EstadoAceptado
Entrada de VulDB274907 [InnoCMS 0.3.1 Backend /panel/pages/1/edit escalada de privilegios]
Puntos17

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!