जमा करें #732726: publiccms PublicCMS <= V5.202506.d Remote Code Execution (RCE)जानकारी

शीर्षकpubliccms PublicCMS <= V5.202506.d Remote Code Execution (RCE)
विवरणA critical path traversal vulnerability exists in the task template management system that allows authenticated administrators to write arbitrary files to the filesystem. By exploiting the weak path sanitization, an attacker can overwrite system scripts that are later executed by the scheduled task system, leading to remote code execution with server privileges.
स्रोत⚠️ https://github.com/AnalogyC0de/public_exp/issues/2
उपयोगकर्ता
 Ana10gy (UID 93358)
सबमिशन06/01/2026 04:05 PM (9 महीनों पहले)
संयम17/01/2026 09:58 AM (11 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि341703 [Sanluan PublicCMS तक 5.202506.d Task Template Management TaskTemplateAdminController.java save path निर्देशिका ट्रैवर्सल]
अंक18

Interested in the pricing of exploits?

See the underground prices here!