| Titre | 10Web CMS <=1.0 Unrestricted Upload |
|---|
| Description | The /admin/template/update interface of the JFinalCMS system has any file upload security problems and can obtain server permissions |
|---|
| La source | ⚠️ https://github.com/wave-to/SomeCms/blob/main/JFinalCMS.md |
|---|
| Utilisateur | wavesky (UID 73979) |
|---|
| Soumission | 03/09/2024 14:53 (il y a 2 ans) |
|---|
| Modérer | 11/09/2024 13:41 (8 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 277167 [JFinalCMS jusqu’à 20240903 com.cms.controller.admin.TemplateController /admin/template/update fileName directory traversal] |
|---|
| Points | 15 |
|---|