| शीर्षक | 石家庄公诚勤朴科技有限公司 Dreamer CMS 4.1.3 File Upload/code execution/xss |
|---|
| विवरण | Modify filename to achieve any file upload, upload html code, execute, execute xss to obtain other users cooikes, csrf man-in the-middle attack, mount phishing websites and malicious networks |
|---|
| स्रोत | ⚠️ https://github.com/sweatxi/BugHub/blob/main/Dreamer-CMS.pdf |
|---|
| उपयोगकर्ता | hexixi (UID 59932) |
|---|
| सबमिशन | 13/12/2023 06:08 AM (3 साल पहले) |
|---|
| संयम | 24/12/2023 08:57 AM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 248938 [Dreamer CMS 4.1.3 /upload/uploadFile file अधिकार वृद्धि] |
|---|
| अंक | 16 |
|---|