जमा करें #250041: KodBox KodBox <=1.48 Command Injection

Kodbox built in plugin fileThumb has a command injection vulnerability, evil user can inject evil command in the file ext and execute.

• स्रोत: ⚠️ https://note.zhaoj.in/share/jSsPAWT1pKsq
• उपयोगकर्ता: glzjin (UID 59815)
• सबमिशन: 10/12/2023 03:45 PM (3 साल पहले)
• संयम: 15/12/2023 05:17 PM (5 days later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 248210 [kalcaddle kodbox तक 1.48 app.php cover path अधिकार वृद्धि]
• अंक: 15