Submeter #387268: innocms Innovative Content Management System v0.3.1 SSTiinformação

Títuloinnocms Innovative Content Management System v0.3.1 SSTi
DescriçãoIn the backend of innocms, you can edit templates for pages like products and about on the "/panel/pages/1/edit" page. These templates allow the execution of functions like system to run system commands, and they can also execute PHP code. This is very dangerous and should not be allowed.
Fonte⚠️ https://github.com/DeepMountains/Mirage/blob/main/CVE15-1.md
Utilizador
 Dee.Mirage (UID 71702)
Submissão07/08/2024 09h14 (há 2 anos)
Moderação16/08/2024 22h48 (10 days later)
EstadoAceite
Entrada VulDB274907 [InnoCMS 0.3.1 Backend /panel/pages/1/edit Elevação de Privilégios]
Pontos17

Do you know our Splunk app?

Download it now for free!