Invia #632537: HuangDou UTCMS V9 RCE vulnerability for remote file download in the backgroundinformazioni

TitoloHuangDou UTCMS V9 RCE vulnerability for remote file download in the background
DescrizioneIn the update.php page, users can remotely downloading the compressed package and automatically decompressing it and RCE.
Fonte⚠️ https://github.com/August829/Yu/blob/main/20250811_1.md
Utente
 Yu Bao (UID 88956)
Sottomissione12/08/2025 15:50 (11 mesi fa)
Moderazione24/08/2025 16:52 (12 days later)
StatoAccettato
Voce VulDB321238 [HuangDou UTCMS 9 Config update.php UPDATEURL escalationi di privilegi]
Punti15

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!