| Название | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability |
|---|
| Описание | YFCMF-TP6-3.0.4 has a Remote Command Execution (RCE) vulnerability.The problem is in app/admin/controller/Ajax.php in the lang function, the vulnerability can be in the framework does not open the multilingual when the inclusion of php files to achieve the effect of rce.YFCMF version is TP6-3.0.4 |
|---|
| Источник | ⚠️ https://github.com/HuBenLab/HuBenVulList/blob/main/YFCMF-TP6-3.0.4%20has%20a%20Remote%20Command%20Execution%20(RCE)%20vulnerability%202.md |
|---|
| Пользователь | p0ison (UID 37575) |
|---|
| Представление | 02.06.2023 08:59 (3 лет назад) |
|---|
| Модерация | 02.06.2023 13:28 (4 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 230543 [YFCMF до 3.0.4 Ajax.php controllername раскрытие информации] |
|---|
| Баллы | 17 |
|---|