Submeter #374413: Xi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 Arbitrary file readinginformação

TítuloXi'an Zhongbang Network Technology Co. CRMEB open source mall system <=5.4.0 Arbitrary file reading
DescriçãoA vulnerability classified as critical has been discovered in the CRMEB open source mall system. This affects the get_image_base64 section of the file PublicController.php. Manipulation of the image/code parameter results in arbitrary file reads.
Fonte⚠️ https://gist.github.com/J1rrY-learn/93a0cf71894570f4eb39344161beb44c
Utilizador
 J1rrY (UID 64327)
Submissão13/07/2024 22h17 (há 2 anos)
Moderação20/07/2024 11h59 (7 days later)
EstadoAceite
Entrada VulDB272066 [ZhongBangKeJi CRMEB até 5.4.0 PublicController.php get_image_base64 file Elevação de Privilégios]
Pontos17

Want to know what is going to be exploited?

We predict KEV entries!