| शीर्षक | e107.org e107 CMS 2.3.3 Deserialization |
|---|
| विवरण | The installer accepts a POST parameter previous_steps, performs base64_decode() and then calls unserialize() directly on that input without validation. Because unserialize() can instantiate arbitrary PHP objects when given attacker-controlled serialized object data, an attacker can craft data that triggers magic methods (for example __wakeup() or __destruct()) in existing classes that perform sensitive actions (file write/delete, command execution, database ops). This can lead to arbitrary file manipulation, privilege escalation within the PHP process context, or remote code execution (RCE), depending on the codebase classes available and the deployment environment. |
|---|
| स्रोत | ⚠️ https://github.com/lakshayyverma/CVE-Discovery/blob/main/e107%20CMS.md |
|---|
| उपयोगकर्ता | lakshay12311 (UID 91298) |
|---|
| सबमिशन | 05/10/2025 02:11 PM (12 महीनों पहले) |
|---|
| संयम | 16/10/2025 01:51 PM (11 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 327949 [e107 CMS तक 2.3.3 POST Parameter install.php base64_decode previous_steps अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|