Invia #427132: zzcms 2023 COMMAND EXECUTION
| Titolo | zzcms 2023 COMMAND EXECUTION |
|---|---|
| Descrizione | When $phome=="DoTranExecutSQL" is used in the file 3/Ebak5.1/upload/phome.php, the SQL file GETSHELL can be imported.This is a fatal flaw that can lead to the server being taken down. |
| Fonte | ⚠️ https:/ |
| Utente | LVZC (UID 74910) |
| Sottomissione | 20/10/2024 11:18 (2 anni fa) |
| Moderazione | 23/10/2024 09:52 (3 days later) |
| Stato | Duplicato |
| Voce VulDB | 281560 [ZZCMS 2023 phome.php Ebak_DoExecSQL/Ebak_DotranExecutSQL phome iniezione SQL] |
| Punti | 0 |