| Titolo | HuangDou UTCMS V9 RCE |
|---|
| Descrizione | The cli.php page can execute system commands without authentication. The filtering rules stipulate that commands can only start with cd, php, nohup, or composer. However, system commands can be executed using "nohup whoami". |
|---|
| Fonte | ⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE5-1.md |
|---|
| Utente | chenzijie0619 (UID 74657) |
|---|
| Sottomissione | 06/10/2024 04:48 (2 anni fa) |
|---|
| Moderazione | 12/10/2024 18:16 (7 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 280244 [HuangDou UTCMS V9 cli.php o escalationi di privilegi] |
|---|
| Punti | 14 |
|---|