| शीर्षक | Fastcms V0.1 anyfile upload background |
|---|
| विवरण | There is a file upload location in the fastcms background, and there is no suffix and content restriction, so that any file can be uploaded, and all uploaded file names, suffix names and upload paths are freely controlled by the user. You can upload crontab and other files to overwrite, and tamper with system and other configuration files to execute commands. There is a risk. For details of uploading attachments, see password.zip in the link |
|---|
| स्रोत | ⚠️ https://github.com/linmoren/fastcms_bug/blob/main/template_files_upload.md |
|---|
| उपयोगकर्ता | yanfei.chen (UID 39837) |
|---|
| सबमिशन | 02/02/2023 08:29 AM (4 साल पहले) |
|---|
| संयम | 02/02/2023 02:42 PM (6 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 220038 [FastCMS 0.1.0 Template Management अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|