| शीर्षक | Huankemao SCRM 0.0.3 Unrestricted Upload |
|---|
| विवरण | HuankeMao SCRM is a data-driven, finely operated service system based on Enterprise WeChat, helping businesses achieve intelligent, simple, friendly, and detailed customer operation management.
There is an arbitrary file upload vulnerability in the backend of the HuanKeMao SCRM 0.0.3. Attackers can exploit this vulnerability to upload backdoor files and gain server privileges.
Github：https://github.com/huankemao/huankemao-php
The vulnerability is located in the `upload_domain_verification_file` function of the `WxkConfig.php` file in the `app\admin\controller\v1` directory. |
|---|
| स्रोत | ⚠️ https://wiki.shikangsi.com/post/share/96b7d919-1749-4e2b-bda2-b80d2fd23865 |
|---|
| उपयोगकर्ता | wiki (UID 72124) |
|---|
| सबमिशन | 18/09/2024 11:33 AM (2 साल पहले) |
|---|
| संयम | 27/09/2024 07:36 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 278660 [HuankeMao SCRM तक 0.0.3 Administrator Backend WxkConfig.php upload_domain_verification_file अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|