जमा करें #418749: HuangDou UTCMS V9 Arbitrary file creationजानकारी

शीर्षकHuangDou UTCMS V9 Arbitrary file creation
विवरणIn the background page of UTCMS, page templates can be created, but the page does not filter the name and content of the template, allowing attackers to directly create a Webshell with the php suffix.
स्रोत⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE5-2.md
उपयोगकर्ता
 chenzijie0619 (UID 74657)
सबमिशन06/10/2024 04:50 AM (2 साल पहले)
संयम12/10/2024 06:16 PM (7 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि280245 [HuangDou UTCMS V9 template_creat.php content अधिकार वृद्धि]
अंक16

Do you want to use VulDB in your project?

Use the official API to access entries easily!