जमा करें #502648: https://github.com/zorlan/skycaiji skycaiji 2.9 RCEजानकारी

शीर्षकhttps://github.com/zorlan/skycaiji skycaiji 2.9 RCE
विवरणIn the fileAction method of zorlan skycaiji v2.9 in vendor/skycaiji/app/admin/controller/Tool.php, there is a file_put_contents function that can modify files in the data directory and complete remote code execution by modifying data/config.php
स्रोत⚠️ https://github.com/sheratan4/cve/issues/5
उपयोगकर्ता
 sheratan (UID 71236)
सबमिशन17/02/2025 05:59 PM (2 साल पहले)
संयम28/02/2025 06:09 PM (11 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि298012 [Zorlan SkyCaiji 2.9 Tool.php fileAction save_data अधिकार वृद्धि]
अंक17

Interested in the pricing of exploits?

See the underground prices here!