| शीर्षक | https://github.com/GreenCMS/GreenCMS GreenCMS v2.3 arbitrary file deletion |
|---|
| विवरण | The /CustomController.class.php file in greencms v2.3 contains an arbitrary file upload vulnerability.This flaw arises from the theme addition feature (access path: index.php?m=admin&c=custom&a=themeadd) failing to properly validate and filter uploaded files. Attackers can upload compressed files containing webshells, which the system automatically decompresses into the website's root directory. Subsequently, tools like Godzilla can exploit these webshells to gain server control, resulting in severe security risks such as data breaches and malicious operations, posing significant threats to system security. |
|---|
| स्रोत | ⚠️ https://github.com/ueh1013/VULN/issues/21 |
|---|
| उपयोगकर्ता | R21Z20 (UID 97129) |
|---|
| सबमिशन | 07/04/2026 05:53 AM (21 दिन पहले) |
|---|
| संयम | 25/04/2026 06:01 PM (19 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 359623 [GreenCMS तक 2.3 index.php?m=admin&c=custom&a=themeadd अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|