| 제목 | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability |
|---|
| 설명 | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability.The problem is in app/admin/controller/Ajax.php in the lang function, the vulnerability can be in the framework does not open the multilingual when the inclusion of php files to achieve the effect of rce.YFCMF version is TP6-3.0.4 |
|---|
| 원천 | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.md |
|---|
| 사용자 | p0ison (UID 37575) |
|---|
| 제출 | 2023. 06. 02. AM 08:59 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 06. 02. PM 01:28 (4 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 230543 [YFCMF 까지 3.0.4 Ajax.php controllername 정보 공개] |
|---|
| 포인트들 | 17 |
|---|