| शीर्षक | Seacms-v11.6 FTP command execution vulnerability |
|---|
| विवरण | A command execution vulnerability that can be classified as serious has been found. You can insert commands into the forwarding message at the specified FTP location to obtain the webshell. This vulnerability will seriously threaten the security of the background system.
Use burp to capture packets at FTP, insert "edit_ {phpinfo()}=300&" after&, and then forward the message.After forwarding, you can refresh the page or directly access the /data/config.ftp.php file in the root directory. If you write a sentence, the trojan will insert the edit___ {@ eval ($_POST [a])}=300& to get the webshell.The received user data is directly written to the php file without filtering, resulting in command execution. |
|---|
| स्रोत | ⚠️ https://github.com/jidle123/Seacms-v11.6/issues/1 |
|---|
| उपयोगकर्ता | jidle (UID 41297) |
|---|
| सबमिशन | 18/02/2023 05:38 AM (4 साल पहले) |
|---|
| संयम | 22/02/2023 06:46 PM (5 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 221630 [SeaCMS 11.6 Picture Management /data/config.ftp.php अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|