| शीर्षक | DESHANG DSMall <=6.1.0 Arbitrary files create |
|---|
| विवरण | The DSMall system, a popular e-commerce platform, has a critical vulnerability in its TaobaoExport.php file. This flaw allows authenticated sellers to create arbitrary files on the server, including PHP files, which can lead to remote code execution. The issue arises from the lack of proper filtering when downloading and storing images from product details. By manipulating the image URL, an attacker can force the server to download and execute a PHP file from an external source. This vulnerability is present in DSMall versions up to and including 6.1.0. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/63LhFitJmKGR |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 09/01/2024 08:10 AM (3 साल पहले) |
|---|
| संयम | 11/01/2024 11:23 AM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 250435 [DeShang DSMall तक 6.1.0 Image URL TaobaoExport.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|