| Título | here is a file upload vulnerability OTCMS v6.0.1 |
|---|
| Descrição | OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details.OTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for detailsOTCMS v6.01 has a high-risk vulnerability, there is a function to execute SQL statements in the system function point, we can open the log to getshell, please see Advisory for details |
|---|
| Fonte | ⚠️ https://gitee.com/wkstestete/cve/blob/master/upload/upload1.md |
|---|
| Utilizador | wkstestete (UID 43375) |
|---|
| Submissão | 24/03/2023 04h21 (há 4 anos) |
|---|
| Moderação | 31/03/2023 12h41 (7 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada VulDB | 143256 [OTCMS 3.85 sysCheckFile_deal.php SELECT Statement Elevação de Privilégios] |
|---|
| Pontos | 0 |
|---|