| शीर्षक | E107cms 2.3.3 remote command execution |
|---|
| विवरण | This vulnerability in e107CMS (≤2.3.3) allows an authenticated attacker to achieve remote code execution (RCE) through a combination of a race condition in the file upload mechanism and an arbitrary file deletion flaw.
Because uploaded files are temporarily stored and validated in an unsafe order, an attacker can exploit timing issues to make malicious code accessible on the server. Additionally, the file deletion vulnerability can be used to remove access restrictions, enabling execution of the uploaded code.
This issue could lead to full server compromise, data loss, and unauthorized access to sensitive resources. |
|---|
| स्रोत | ⚠️ https://note-hxlab.wetolink.com/share/9vhzTac7xddL |
|---|
| उपयोगकर्ता | angelkat (UID 64410) |
|---|
| सबमिशन | 09/10/2025 09:20 AM (12 महीनों पहले) |
|---|
| संयम | 18/10/2025 11:46 PM (10 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 123951 [e107 CMS 2.1.8 Plupload upload.php PHP File अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|