| शीर्षक | Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 phar Deserialization/RCE |
|---|
| विवरण | A vulnerability classified as critical has been discovered in the CRMEB open source mall system. This affects the downloadImage section of the file CopyTaobaoServices.php (authentication required). Manipulation of the images parameter causes phar deserialisation to enable arbitrary code execution. |
|---|
| स्रोत | ⚠️ https://gist.github.com/J1rrY-learn/e15a1926a3b5a2b8805a15cb95eff1d7 |
|---|
| उपयोगकर्ता | J1rrY (UID 64327) |
|---|
| सबमिशन | 13/07/2024 07:21 PM (2 साल पहले) |
|---|
| संयम | 20/07/2024 11:59 AM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 272065 [ZhongBangKeJi CRMEB तक 5.4.0 CopyTaobaoServices.php downloadImage अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|