| शीर्षक | 10year lmxcms 1.4 RCE |
|---|
| विवरण | There is code execution at AcquisiModel.class.php of lmxcms, and there is a dangerous function eval in its formatData() method, which can be queried to get the malicious code after executing in and out of the malicious code through the backend sql and utilizing the formaData() method. |
|---|
| स्रोत | ⚠️ https://github.com/gaorenyusi/gaorenyusi/blob/main/lmx.md |
|---|
| उपयोगकर्ता | gaorenyusi (UID 74236) |
|---|
| सबमिशन | 29/08/2024 06:00 PM (2 साल पहले) |
|---|
| संयम | 06/09/2024 05:30 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 276728 [lmxcms तक 1.4 SQL Command Execution admin.php?m=Acquisi&a=testcj&lid=1 formatData data अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|