| 제목 | YFCMF-TP6-3.0.4 has a Remote Command Execution vulnerability |
|---|
| 설명 | This vulnerability is entirely caused by thinkphp framework, in yfcmf by default open multi-language(app/admin/controller/Ajax.php), the attacker can use pearcmd file contains to achieve rce.The prerequisite for the exploit is to know the path of the percmd file in the server, if the path is not known then the exploit cannot be performed |
|---|
| 원천 | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%201.md |
|---|
| 사용자 | p0ison (UID 37575) |
|---|
| 제출 | 2023. 06. 02. AM 08:50 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 06. 02. PM 01:28 (5 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 230542 [YFCMF 까지 3.0.4 index.php 정보 공개] |
|---|
| 포인트들 | 18 |
|---|