| शीर्षक | dedecms V5.7.118 Command Injection |
|---|
| विवरण | A vulnerability exists in DedeCMS V5.7.118 backend that allows authenticated administrators to write arbitrary PHP files to the server. The `tpl.php` file's `savetagfile` function writes user-supplied content directly to `.lib.php` files in the `include/taglib/` directory.
Although the application implements malicious code detection (Lines 31-61), this protection can be bypassed using PHP's ReflectionFunction API and php://input stream wrapper, leading to Remote Code Execution (RCE).
|
|---|
| स्रोत | ⚠️ https://note-hxlab.wetolink.com/share/ob1uepAdQwYC |
|---|
| उपयोगकर्ता | yu22x (UID 34832) |
|---|
| सबमिशन | 16/12/2025 02:18 AM (10 महीनों पहले) |
|---|
| संयम | 21/12/2025 09:23 AM (5 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 235786 [DedeCMS तक 5.7.109 HTTP POST Request /dede/tpl.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|