जमा करें #474965: wuzhicms 4.1.0 SSRF

The test method in coreframe/app/search/admin/config.php does not filter the input sphinxhost and sphinxport parameters, allowing attackers to detect whether internal network ports are open

• स्रोत: ⚠️ https://github.com/wuzhicms/wuzhicms/issues/212
• उपयोगकर्ता: LVZC (UID 74910)
• सबमिशन: 05/01/2025 12:17 PM (2 साल पहले)
• संयम: 15/01/2025 01:00 PM (10 days later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 291915 [wuzhicms 4.1.0 config.php test sphinxhost/sphinxport अधिकार वृद्धि]
• अंक: 15