제출 #418748: HuangDou UTCMS V9 RCE
| 제목 | HuangDou UTCMS V9 RCE |
|---|---|
| 설명 | The cli.php page can execute system commands without authentication. The filtering rules stipulate that commands can only start with cd, php, nohup, or composer. However, system commands can be executed using "nohup whoami". |
| 원천 | ⚠️ https:/ |
| 사용자 | chenzijie0619 (UID 74657) |
| 제출 | 2024. 10. 06. AM 04:48 (2 연령 ago) |
| 모더레이션 | 2024. 10. 12. PM 06:16 (7 days later) |
| 상태 | 수락 |
| VulDB 항목 | 280244 [HuangDou UTCMS V9 cli.php o 권한 상승] |
| 포인트들 | 14 |