提出 #387268: innocms Innovative Content Management System v0.3.1 SSTi情報

タイトルinnocms Innovative Content Management System v0.3.1 SSTi
説明In the backend of innocms, you can edit templates for pages like products and about on the "/panel/pages/1/edit" page. These templates allow the execution of functions like system to run system commands, and they can also execute PHP code. This is very dangerous and should not be allowed.
ソース⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE15-1.md
ユーザー
 Dee.Mirage (UID 71702)
送信2024年08月07日 09:14 (2 年 ago)
モデレーション2024年08月16日 22:48 (10 days later)
ステータス承諾済み
VulDBエントリ274907 [InnoCMS 0.3.1 Backend /panel/pages/1/edit 特権昇格]
ポイント17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!