जमा करें #418748: HuangDou UTCMS V9 RCEजानकारी

शीर्षकHuangDou UTCMS V9 RCE
विवरणThe cli.php page can execute system commands without authentication. The filtering rules stipulate that commands can only start with cd, php, nohup, or composer. However, system commands can be executed using "nohup whoami".
स्रोत⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE5-1.md
उपयोगकर्ता
 chenzijie0619 (UID 74657)
सबमिशन06/10/2024 04:48 AM (2 साल पहले)
संयम12/10/2024 06:16 PM (7 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि280244 [HuangDou UTCMS V9 cli.php o अधिकार वृद्धि]
अंक14

Want to stay up to date on a daily basis?

Enable the mail alert feature now!