| शीर्षक | MuYucms has Arbitrary code execution vulnerability |
|---|
| विवरण | we can construct packets after logging in and we will read the config file, and then we can Specify the remote url to download the file and save the downloaded file to the specified location. then we can access the specified file directory and find that the code was successfully executed.
|
|---|
| स्रोत | ⚠️ https://github.com/MuYuCMS/MuYuCMS/issues/7 |
|---|
| उपयोगकर्ता | kaga_cve (UID 41588) |
|---|
| सबमिशन | 25/02/2023 07:39 AM (4 साल पहले) |
|---|
| संयम | 26/02/2023 01:20 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 221805 [MuYuCMS 2.2 getFile.html url अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|