| Titolo | jeanmarc77 123Solar 1.8.4.5 Code Injection |
|---|
| Descrizione | 123Solar x.x.x.x contains a PHP Code Injection vulnerability. Attackers can inject arbitrary PHP commands into the PASSOx parameter, which can then be executed by other PHP scripts that include config/config_invt1.php. |
|---|
| Fonte | ⚠️ https://github.com/jeanmarc77/123solar/issues/74 |
|---|
| Utente | hejiasheng (UID 74892) |
|---|
| Sottomissione | 14/09/2024 08:31 (2 anni fa) |
|---|
| Moderazione | 19/09/2024 17:55 (5 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 278162 [jeanmarc77 123solar 1.8.4.5 config/config_invt1.php PASSOx escalationi di privilegi] |
|---|
| Punti | 17 |
|---|