| शीर्षक | SyCms 1.0 Unrestricted Upload |
|---|
| विवरण | The file upload/save functionality in the SyCms content management system's administrative panel lacks necessary security validation when processing user-provided parameters. Authenticated administrative users can construct specific requests to cause the system to write files with arbitrary content to arbitrary paths on the server. Attackers can then write malicious code to paths within the web directory that have script execution privileges, leading to remote code execution (RCE). |
|---|
| स्रोत | ⚠️ https://gitee.com/shanyu/SyCms/issues/IDCEWG |
|---|
| उपयोगकर्ता | formanagain (UID 93347) |
|---|
| सबमिशन | 11/12/2025 09:48 AM (10 महीनों पहले) |
|---|
| संयम | 27/12/2025 10:18 AM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338508 [shanyu SyCms तक a242ef2d194e8bb249dc175e7c49f2c1673ec921 Administrative Panel FileManageController.class.php addPost अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|