| タイトル | YFCMF-TP6-3.0.4 has a Remote Command Execution vulnerability |
|---|
| 説明 | This vulnerability is entirely caused by thinkphp framework, in yfcmf by default open multi-language(app/admin/controller/Ajax.php), the attacker can use pearcmd file contains to achieve rce.The prerequisite for the exploit is to know the path of the percmd file in the server, if the path is not known then the exploit cannot be performed |
|---|
| ソース | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%201.md |
|---|
| ユーザー | p0ison (UID 37575) |
|---|
| 送信 | 2023年06月02日 08:50 (3 年 ago) |
|---|
| モデレーション | 2023年06月02日 13:28 (5 hours later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 230542 [YFCMF 迄 3.0.4 index.php 情報漏えい] |
|---|
| ポイント | 18 |
|---|