| शीर्षक | conjure Position Department Service Quality Evaluation System <=1.0.11 Command Shell in Externally Accessible Directory |
|---|
| विवरण | A hidden PHP webshell backdoor has been discovered in Position Department Service Quality Evaluation System v1.0.11 (based on FastAdmin v1.5.0.20240328), located at public/assets/less/bootstrap-less/mixins/head.php. The webshell allows remote attackers to execute arbitrary PHP code on the server by sending specially crafted, encrypted POST requests. The malicious code uses XOR encryption and session persistence to evade detection and maintain access, granting full control over the affected system. This poses a critical security risk, enabling unauthorized access, data theft, and potential further compromise of business assets. Immediate removal of the malicious file and thorough security review are strongly recommended.
|
|---|
| स्रोत | ⚠️ https://note-hxlab.wetolink.com/share/LZJIef0phS6B |
|---|
| उपयोगकर्ता | YELEIPENG (UID 73615) |
|---|
| सबमिशन | 24/06/2025 10:18 AM (1 वर्ष पहले) |
|---|
| संयम | 27/06/2025 08:38 PM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 314282 [Conjure Position Department Service Quality Evaluation System head.php eval अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|