| Titolo | here is a file upload vulnerability OTCMS v6.0.1 |
|---|
| Descrizione | OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details.OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for detailsOTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details |
|---|
| Fonte | ⚠️ https://gitee.com/wkstestete/cve/blob/master/upload/upload1.md |
|---|
| Utente | wkstestete (UID 43375) |
|---|
| Sottomissione | 24/03/2023 04:21 (4 anni fa) |
|---|
| Moderazione | 31/03/2023 12:41 (7 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 143256 [OTCMS 3.85 sysCheckFile_deal.php SELECT Statement escalationi di privilegi] |
|---|
| Punti | 0 |
|---|