| Titolo | Wang Junnan DreamerCMS 4.1.3.1 Remote command execution |
|---|
| Descrizione | DreamerCMS versions earlier than x.x.x.x have an RCE vulnerability, which is caused by the code that detects directory traversal in the compressed package decompression function is bypassed, resulting in the writing of scheduled tasks and the execution of rebound shell commands |
|---|
| Fonte | ⚠️ https://gitee.com/y1336247431/poc-public/issues/I9BA5R |
|---|
| Utente | passwd7 (UID 66943) |
|---|
| Sottomissione | 25/03/2024 06:07 (3 anni fa) |
|---|
| Moderazione | 04/04/2024 16:14 (10 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 259369 [Dreamer CMS fino a 4.1.3.0 ThemesController.java ZipUtils.unZipFiles directory traversal] |
|---|
| Punti | 17 |
|---|