| 제목 | gitee XunruiCms v4.6.3 Deserialization and code excute |
|---|
| 설명 | There is a deserialization vulnerability in the latest version of Xunrui CMS gitee release, which can execute code and construct POP chains according to the purpose of exploitation, such as RCE chains, execute system commands. A malicious attacker is able to gain privileges on the server. |
|---|
| 원천 | ⚠️ https://github.com/stevenchen0x01/CVE2/blob/main/cve2.md |
|---|
| 사용자 | Steven_Dra3w (UID 76559) |
|---|
| 제출 | 2025. 02. 05. PM 12:57 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 02. 10. AM 11:22 (5 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 295080 [dayrui XunRuiCMS 4.6.3 Linkage.php import_add 권한 상승] |
|---|
| 포인트들 | 17 |
|---|