제출 #427101: zzcms 2023 COMMAND EXECUTION
| 제목 | zzcms 2023 COMMAND EXECUTION |
|---|---|
| 설명 | When $phome=="DoExecutSQL" is set in the file 3/Ebak5.1/upload/phome.php, any SQL statement can be executed, and a Trojan can be written to the website root directory, causing fatal exploitation by GETSHELL. |
| 원천 | ⚠️ https:/ |
| 사용자 | LVZC (UID 74910) |
| 제출 | 2024. 10. 20. AM 10:45 (2 연령 ago) |
| 모더레이션 | 2024. 10. 23. AM 09:52 (3 days later) |
| 상태 | 수락 |
| VulDB 항목 | 281560 [ZZCMS 2023 phome.php Ebak_DoExecSQL/Ebak_DotranExecutSQL phome SQL 주입] |
| 포인트들 | 17 |