| शीर्षक | YunyouCMS YunyouCMS <=2.2.6 Arbitrary File Include |
|---|
| विवरण | Yunyou CMS version 2.2.6 and earlier has a critical Arbitrary File Include vulnerability in the file /app/index/controller/Common.php. This flaw allows an attacker to upload arbitrary PHP code disguised as a PNG file via the 'templateFile' parameter. The uploaded file can then be executed by including it in the system through the 'buildHtml' function. This vulnerability can lead to Remote Code Execution (RCE), enabling an attacker to take control of the server, potentially leading to unauthorized access, data breach, and other serious consequences. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/FO8AL78oAeTS |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 14/01/2024 03:35 PM (3 साल पहले) |
|---|
| संयम | 17/01/2024 02:45 PM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 251374 [Yunyou CMS तक 2.2.6 Common.php templateFile अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|