| Titolo | 如沐春 jizhicms V2.5.5 Fileupload |
|---|
| Descrizione | Jizhicms has a vulnerability in its backend file upload mechanism. Attackers can modify the allowed file types in the backend and add files with the .phar extension, which can enable the upload and parsing of a Webshell. |
|---|
| Fonte | ⚠️ https://github.com/DeepMountains/zzz/blob/main/CVE-2025-1-1.md |
|---|
| Utente | Dee.Mirage (UID 71702) |
|---|
| Sottomissione | 04/12/2025 08:55 (10 mesi fa) |
|---|
| Moderazione | 14/12/2025 13:25 (10 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 223107 [Jizhicms 2.4.5 phtml File CommonController.php escalationi di privilegi] |
|---|
| Punti | 0 |
|---|