Enviar #632537: HuangDou UTCMS V9 RCE vulnerability for remote file download in the background
| Título | HuangDou UTCMS V9 RCE vulnerability for remote file download in the background |
|---|---|
| Descripción | In the update.php page, users can remotely downloading the compressed package and automatically decompressing it and RCE. |
| Fuente | ⚠️ https:/ |
| Usuario | Yu Bao (UID 88956) |
| Sumisión | 2025-08-12 15:50 (hace 1 Año) |
| Moderación | 2025-08-24 16:52 (12 days later) |
| Estado | Aceptado |
| Entrada de VulDB | 321238 [HuangDou UTCMS 9 Config update.php UPDATEURL escalada de privilegios] |
| Puntos | 15 |