| 제목 | publiccms PublicCMS <= V5.202506.d Remote Code Execution (RCE) |
|---|
| 설명 | A critical path traversal vulnerability exists in the task template management system that allows authenticated administrators to write arbitrary files to the filesystem. By exploiting the weak path sanitization, an attacker can overwrite system scripts that are later executed by the scheduled task system, leading to remote code execution with server privileges.
|
|---|
| 원천 | ⚠️ https://github.com/AnalogyC0de/public_exp/issues/2 |
|---|
| 사용자 | Ana10gy (UID 93358) |
|---|
| 제출 | 2026. 01. 06. PM 04:05 (9 개월 ago) |
|---|
| 모더레이션 | 2026. 01. 17. AM 09:58 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 341703 [Sanluan PublicCMS 까지 5.202506.d Task Template Management TaskTemplateAdminController.java save path 디렉토리 순회] |
|---|
| 포인트들 | 18 |
|---|