| शीर्षक | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability |
|---|
| विवरण | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability.The problem is in app/admin/controller/Ajax.php in the lang function, the vulnerability can be in the framework does not open the multilingual when the inclusion of php files to achieve the effect of rce.YFCMF version is TP6-3.0.4 |
|---|
| स्रोत | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.md |
|---|
| उपयोगकर्ता | p0ison (UID 37575) |
|---|
| सबमिशन | 02/06/2023 08:59 AM (3 साल पहले) |
|---|
| संयम | 02/06/2023 01:28 PM (4 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 230543 [YFCMF तक 3.0.4 Ajax.php controllername सूचना का प्रकटीकरण] |
|---|
| अंक | 17 |
|---|