| Название | 10year lmxcms 1.4 RCE |
|---|
| Описание | There is code execution at AcquisiModel.class.php of lmxcms, and there is a dangerous function eval in its formatData() method, which can be queried to get the malicious code after executing in and out of the malicious code through the backend sql and utilizing the formaData() method. |
|---|
| Источник | ⚠️ https://github.com/gaorenyusi/gaorenyusi/blob/main/lmx.md |
|---|
| Пользователь | gaorenyusi (UID 74236) |
|---|
| Представление | 29.08.2024 18:00 (2 лет назад) |
|---|
| Модерация | 06.09.2024 17:30 (8 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 276728 [lmxcms до 1.4 SQL Command Execution admin.php?m=Acquisi&a=testcj&lid=1 formatData data эскалация привилегий] |
|---|
| Баллы | 17 |
|---|