| タイトル | DefaultFuction CMS V1.0.0 Command Injection |
|---|
| 説明 | A Command Injection vulnerability was identified in the Content Management System. The issue occurs when the application passes user-supplied input to system shell commands (such as ping, nslookup, or traceroute) without proper validation, sanitization, or escaping. An attacker can inject arbitrary operating system commands by appending command separators or operators to the legitimate input parameter, causing the server to execute malicious commands with the privileges of the web application.
|
|---|
| ソース | ⚠️ https://github.com/DefaultFuction/Content-Management-System/issues/1 |
|---|
| ユーザー | Practice (UID 95611) |
|---|
| 送信 | 2026年03月16日 14:42 (21 日 ago) |
|---|
| モデレーション | 2026年04月01日 16:02 (16 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 354667 [DefaultFuction Content-Management-System 1.0 /admin/tools.php host 特権昇格] |
|---|
| ポイント | 20 |
|---|