제출 #387268: innocms Innovative Content Management System v0.3.1 SSTi정보

제목innocms Innovative Content Management System v0.3.1 SSTi
설명In the backend of innocms, you can edit templates for pages like products and about on the "/panel/pages/1/edit" page. These templates allow the execution of functions like system to run system commands, and they can also execute PHP code. This is very dangerous and should not be allowed.
원천⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE15-1.md
사용자
 Dee.Mirage (UID 71702)
제출2024. 08. 07. AM 09:14 (2 연령 ago)
모더레이션2024. 08. 16. PM 10:48 (10 days later)
상태수락
VulDB 항목274907 [InnoCMS 0.3.1 Backend /panel/pages/1/edit 권한 상승]
포인트들17

Do you know our Splunk app?

Download it now for free!