| शीर्षक | flute-cms.com Web-based CMS for server games written on PHP v0.2.2.4-alpha Remote Code Execute (RCE) |
|---|
| विवरण | By logging in as an admin user and navigating to the /admin/pages/list page, an attacker can customize routes and pages. In the page content definition, it suggests that we can insert HTML code, but even if PHP code is inserted, it will still be parsed. |
|---|
| स्रोत | ⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE5-2.md |
|---|
| उपयोगकर्ता | Dee.Mirage (UID 71702) |
|---|
| सबमिशन | 16/07/2024 08:42 AM (2 साल पहले) |
|---|
| संयम | 20/07/2024 12:06 PM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 272068 [Flute CMS 0.2.2.4-alpha /admin/pages/list blocks अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|