제출 #399916: 10year lmxcms 1.4 RCE
| 제목 | 10year lmxcms 1.4 RCE |
|---|---|
| 설명 | There is code execution at AcquisiModel.class.php of lmxcms, and there is a dangerous function eval in its formatData() method, which can be queried to get the malicious code after executing in and out of the malicious code through the backend sql and utilizing the formaData() method. |
| 원천 | ⚠️ https:/ |
| 사용자 | gaorenyusi (UID 74236) |
| 제출 | 2024. 08. 29. PM 06:00 (2 연령 ago) |
| 모더레이션 | 2024. 09. 06. PM 05:30 (8 days later) |
| 상태 | 수락 |
| VulDB 항목 | 276728 [lmxcms 까지 1.4 SQL Command Execution admin.php?m=Acquisi&a=testcj&lid=1 formatData data 권한 상승] |
| 포인트들 | 17 |