| शीर्षक | GitHub Warehouse Management System V1.0 Command execution |
|---|
| विवरण | WMS is an enterprise warehouse management system, where the r_name parameter in the wms-master/src/system/datarec. php file has no filtering and is controllable by the user. The parameter is submitted via POST and executed through the dangerous exec() function. Attackers can construct arbitrary malicious commands and exploit this vulnerability to perform malicious operations, obtain sensitive information, etc. |
|---|
| स्रोत | ⚠️ https://github.com/FeMiner/wms/issues/42 |
|---|
| उपयोगकर्ता | clay (UID 95499) |
|---|
| सबमिशन | 11/02/2026 01:08 PM (8 महीनों पहले) |
|---|
| संयम | 23/02/2026 04:14 PM (12 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 200024 [FeMiner wms 1.0 datarec.php r_name अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|